CyberSec.Space Logo
CVEブラウザに戻る

CVE-2008-4501

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.0230%
EPSS Percentile27.30th
Published2008年10月9日
Last Modified2026年4月23日

Vulnerability Description

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command.

Affected Platforms (CPE)

📦
Solarwinds

Serv U File Server

= 7.0.0.1
📦
Solarwinds

Serv U File Server

= 7.0.0.2
📦
Solarwinds

Serv U File Server

= 7.0.0.3
📦
Solarwinds

Serv U File Server

= 7.0.0.4
📦
Solarwinds

Serv U File Server

= 7.1.0.0
📦
Solarwinds

Serv U File Server

= 7.1.0.1
📦
Solarwinds

Serv U File Server

= 7.1.0.2
📦
Solarwinds

Serv U File Server

= 7.2.0.0
📦
Solarwinds

Serv U File Server

= 7.2.0.1
📦
Solarwinds

Serv U File Server

= 7.3.0.0
📦
Solarwinds

Serv U File Server

= 7.3.0.1
📦
Solarwinds

Serv U File Server

= 7.3.0.2

References & Advisories

🔗 http://secunia.com/advisories/32150
🔗 http://securityreason.com/securityalert/4378
🔗 http://www.vupen.com/english/advisories/2008/2746
🔗 https://www.exploit-db.com/exploits/6661
🔗 http://secunia.com/advisories/32150
🔗 http://securityreason.com/securityalert/4378
🔗 http://www.vupen.com/english/advisories/2008/2746
🔗 https://www.exploit-db.com/exploits/6661

関連する脆弱性情報

CVE-2018-174409.8

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default ...

CVE-2020-154929.8

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web applicat...

CVE-2021-265289.1

The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection reques...

CVE-2011-48009.0

Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitra...