FTP: Rhino Software Serv-U FTP Server rnto Command Directory Traversal

This signature detects attempts to exploit a known directory traversal vulnerability in the Rhino Software Serv-U FTP Server. It is due to an input validation error in server that does not properly sanitize the rnto command. A successful attack allows authenticated remote attackers to write arbitrary files to any location on the server. Also, the attacker can overwrite any file in the target server, which can cause a denial-of-service condition or allow them to run arbitrary commands on the target.

Extended Description

RhinoSoft Serv-U FTP server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of the application's current directory. This could help the attacker launch further attacks. Serv-U FTP server 7.2.0.1 is vulnerable; other versions may also be affected.

Affected Products

Rhino_software serv-u

References

BugTraq: 31563

Short Name

FTP:SERVU:RNTO-TRAV

Severity

Major

Recommended

False

Recommended Action

Drop

FTP: Rhino Software Serv-U FTP Server rnto Command Directory Traversal

Extended Description

Affected Products

References

Found a potential security threat?