CVE-2004-2533

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SITE CHMOD command with a "\..." followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111.

Ссылки

http://secunia.com/advisories/10706
Patch
Vendor Advisory
http://securitytracker.com/id?1009086
Exploit
http://www.osvdb.org/3713
http://www.securityfocus.com/bid/9675
https://exchange.xforce.ibmcloud.com/vulnerabilities/15251
http://secunia.com/advisories/10706
Patch
Vendor Advisory
http://securitytracker.com/id?1009086
Exploit
http://www.osvdb.org/3713
http://www.securityfocus.com/bid/9675
https://exchange.xforce.ibmcloud.com/vulnerabilities/15251

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05452

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-23w8-jcvm-j4jg

github

больше 3 лет назад

Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SITE CHMOD command with a "\\...\" followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111.