Test ID:	1.3.6.1.4.1.25623.1.0.900149
Category:	Denial of Service
Title:	Serv-U File Renaming Directory Traversal and 'STOU' DoS Vulnerabilities
Summary:	Serv-U FTP Server is prone to directory traversal and denial of; service (DoS) vulnerabilities.
Description:	Summary: Serv-U FTP Server is prone to directory traversal and denial of service (DoS) vulnerabilities. Vulnerability Insight: The flaws are due to: - error in handling 'STOU' FTP command. It can exhaust available CPU resources when exploited through a specially crafted argument value. - input validation error in the FTP service when renaming files which can be exploited to overwrite or rename files via directory traversal attacks. Vulnerability Impact: Successful exploitation allows an attacker to write arbitrary files to locations outside of the application's current directory, and deny the service. Affected Software/OS: RhinoSoft Serv-U FTP Server 7.3.0.0 and prior. Solution: Update to version 10 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.