What is CVE-2002-2393?

CVE-2002-2393 is a vulnerability in Solarwinds Serv-u_file_server, classified under Improper Input Validation. Published 2002-12-31.

Is CVE-2002-2393 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Solarwinds Serv-u_file_server

CVE-2002-2393

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.026 (83.7th percentile) — read the EPSS interpretation.

Affected products

Solarwinds Serv-u_file_server — versions 3.1.0.0, 4.0.0.4
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2002-2393?: CVE-2002-2393 is a vulnerability in Solarwinds Serv-u_file_server, classified under Improper Input Validation. Published 2002-12-31.
Is CVE-2002-2393 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.