CyberSec.Space Logo
Back to CVE Browser

CVE-2004-0330

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1370%
EPSS Percentile43.73th
PublishedNov 23, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.

Affected Platforms (CPE)

📦
Solarwinds

Serv U File Server

<= 5.0.0.0
📦
Solarwinds

Serv U File Server

= 3.0.0.16
📦
Solarwinds

Serv U File Server

= 3.0.0.17
📦
Solarwinds

Serv U File Server

= 3.1.0.0
📦
Solarwinds

Serv U File Server

= 3.1.0.1
📦
Solarwinds

Serv U File Server

= 3.1.0.3
📦
Solarwinds

Serv U File Server

= 4.0.0.4
📦
Solarwinds

Serv U File Server

= 4.1.0.0
📦
Solarwinds

Serv U File Server

= 4.1.0.3

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107781164214399&w=2
🔗 http://www.cnhonker.com/advisory/serv-u.mdtm.txt
🔗 http://www.securityfocus.com/bid/9751
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15323
🔗 http://marc.info/?l=bugtraq&m=107781164214399&w=2
🔗 http://www.cnhonker.com/advisory/serv-u.mdtm.txt
🔗 http://www.securityfocus.com/bid/9751
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15323

Related Vulnerabilities

CVE-2018-174409.8

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default ...

CVE-2020-154929.8

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web applicat...

CVE-2021-265289.1

The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection reques...

CVE-2008-45019.0

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated ...