The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serv-u_file_server | Solarwinds | 7.0.0.1 (including) | 7.0.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.2 (including) | 7.0.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.3 (including) | 7.0.0.3 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.4 (including) | 7.0.0.4 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.0 (including) | 7.1.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.1 (including) | 7.1.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.2 (including) | 7.1.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.2.0.0 (including) | 7.2.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.2.0.1 (including) | 7.2.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.0 (including) | 7.3.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.1 (including) | 7.3.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.2 (including) | 7.3.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.4.0.0 (including) | 7.4.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.4.0.1 (including) | 7.4.0.1 (including) |