high7.8Public exploit code
CVE-2009-1031
Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary di…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RhinoSoft Serv-U FTP Server 7.4.0.1 - 'MKD' Create Arbitrary Directories2009-03-16 · remote · windows · Verified
Impact
Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \.. (backslash dot dot) in an MKD request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Serv-U File Server | Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.1.0.0, 7.1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/52773
- http://secunia.com/advisories/34329
- http://www.securityfocus.com/bid/34125
- http://www.vupen.com/english/advisories/2009/0738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49258
- https://www.exploit-db.com/exploits/8211
- http://osvdb.org/52773
- http://secunia.com/advisories/34329
- http://www.securityfocus.com/bid/34125
- http://www.vupen.com/english/advisories/2009/0738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49258
- https://www.exploit-db.com/exploits/8211