Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the SITE SET TRANSFERPROGRESS ON FTP command.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serv-u_file_server | Solarwinds | 7.0.0.1 (including) | 7.0.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.2 (including) | 7.0.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.3 (including) | 7.0.0.3 (including) |
| Serv-u_file_server | Solarwinds | 7.0.0.4 (including) | 7.0.0.4 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.0 (including) | 7.1.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.1 (including) | 7.1.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.1.0.2 (including) | 7.1.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.2.0.0 (including) | 7.2.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.2.0.1 (including) | 7.2.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.0 (including) | 7.3.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.1 (including) | 7.3.0.1 (including) |
| Serv-u_file_server | Solarwinds | 7.3.0.2 (including) | 7.3.0.2 (including) |
| Serv-u_file_server | Solarwinds | 7.4.0.0 (including) | 7.4.0.0 (including) |
| Serv-u_file_server | Solarwinds | 7.4.0.1 (including) | 7.4.0.1 (including) |
| Serv-u_file_server | Solarwinds | 8.0.0.1 (including) | 8.0.0.1 (including) |
| Serv-u_file_server | Solarwinds | 8.0.0.2 (including) | 8.0.0.2 (including) |
| Serv-u_file_server | Solarwinds | 8.0.0.4 (including) | 8.0.0.4 (including) |
| Serv-u_file_server | Solarwinds | 8.0.0.5 (including) | 8.0.0.5 (including) |
| Serv-u_file_server | Solarwinds | 8.0.0.7 (including) | 8.0.0.7 (including) |
| Serv-u_file_server | Solarwinds | 8.1.0.1 (including) | 8.1.0.1 (including) |
| Serv-u_file_server | Solarwinds | 8.1.0.3 (including) | 8.1.0.3 (including) |
| Serv-u_file_server | Solarwinds | 8.2.0.0 (including) | 8.2.0.0 (including) |
| Serv-u_file_server | Solarwinds | 8.2.0.1 (including) | 8.2.0.1 (including) |
| Serv-u_file_server | Solarwinds | 8.2.0.3 (including) | 8.2.0.3 (including) |
References
- http://secunia.com/advisories/36873
- http://www.serv-u.com/releasenotes/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798
- http://secunia.com/advisories/36873
- http://www.serv-u.com/releasenotes/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798