Path Traversal in Solarwinds Serv-u_file_server
CVE-2011-4800
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) li…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.084 (94.4th percentile) — read the EPSS interpretation.
Affected products
- Solarwinds Serv-u_file_server — versions 3.0.0.16, 3.0.0.17, 3.1.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)