Unscored CVE-2002-2393 EUVD-2002-2371GHSA-372j-xq8c-5863

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote atta…

Published Oct 31, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.

References

20021106 RhinoSoft Serv-U FTP Anonymous Remote DoS Vulnerability mailing-list
6112 vdb-entry
servu-mkd-command-dos(10573) vdb-entry