Vulnerability in Cat Soft Serv-U

CVE-2000-0176

The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.

EPSS: 0.021 (79.6th percentile) — read the EPSS interpretation.

Affected products

Cat_soft Serv-u — versions 2.4, 2.5, 2.5a
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)