NetSight
IP …
critical9.0Public exploit code

CVE-2011-4800

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get commands.

Affected products

VendorProductAffected versions
SolarwindsServ-U File Server
through 11.1.0.3
Versions 3.0.0.16, 3.0.0.17, 3.1.0.0, 3.1.0.1, 3.1.0.3

Weakness classification

CWE-22

References