FTP: Vulnerable Serv-U FTP version (< 4.2)

This signature detects RhinoSoft Serv-U FTP 4.2 and earlier. These versions contain a buffer overflow vulnerability in the CHMOD command that enables attackers to execute malicous code on a remote server.

Extended Description

RhinoSoft Serv-U FTP Server is prone to a remote post-authentication buffer-overflow vulnerability. The vulnerability occurs when a malicious filename argument is passed to the SITE CHMOD command. The immediate consequences of this issue may be a denial of service. An attacker may be able to leverage this condition to execute arbitrary code in the context of the affected service, but this has not been confirmed.

Affected Products

Rhino_software serv-u

References

BugTraq: 9675

CVE: CVE-2004-2533

URL: http://www.serv-u.com/ http://www.securityfocus.com/archive/82/354209/2004-02-14/2004-02-20/0

Short Name

FTP:VULN:SERV-U-FTP-4-2

Severity

Info

Recommended

False

Recommended Action

None

FTP: Vulnerable Serv-U FTP version (< 4.2)

Extended Description

Affected Products

References

Found a potential security threat?