vendor:
FTP Serv-U
by:
Jonathan Salwan
7.8
CVSS
HIGH
Denial of Service
N/A
CWE
Product Name: FTP Serv-U
Affected Version From: 7.4.0.1
Affected Version To: 7.4.0.1
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
Denial of Service in Serv-u up to 7.4.0.1 (no crash)
A denial of service vulnerability exists in FTP Serv-U up to 7.4.0.1, which allows an attacker to saturate the server and cause it to stop responding. This is achieved by sending a SMNT command followed by a '**' sequence to the server.
Mitigation:
Upgrade to the latest version of FTP Serv-U