Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command.
2004-12-31T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 10.0 (HIGH)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | solarwinds | serv-u_file_server | ≤ 5.0.0.11 | Yes |
Application | solarwinds | serv-u_file_server | 3.0.0.16 | Yes |
Application | solarwinds | serv-u_file_server | 3.0.0.17 | Yes |
Application | solarwinds | serv-u_file_server | 3.1.0.0 | Yes |
Application | solarwinds | serv-u_file_server | 3.1.0.1 | Yes |
Application | solarwinds | serv-u_file_server | 3.1.0.3 | Yes |
Application | solarwinds | serv-u_file_server | 4.0.0.4 | Yes |
Application | solarwinds | serv-u_file_server | 4.1.0.0 | Yes |
Application | solarwinds | serv-u_file_server | 4.1.0.3 | Yes |
Application | solarwinds | serv-u_file_server | 5.0.0.0 | Yes |
Application | solarwinds | serv-u_file_server | 5.0.0.4 | Yes |
Application | solarwinds | serv-u_file_server | 5.0.0.9 | Yes |