Description
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Serv-U FTP Server Buffer Overflow
exploit/windows/ftp/servu_chmod
Exploit-DB 5
- RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit) EDB-18190 · remote · Dec 2, 2011 · verified
- RhinoSoft Serv-U FTPd Server 4.x - 'site chmod' Remote Buffer Overflow EDB-822 · remote · Jan 30, 2004 · verified
- RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow EDB-149 · remote · Jan 27, 2004 · verified
- RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (2) EDB-23592 · remote · Jan 25, 2004 · verified
- RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (1) EDB-23591 · remote · Jan 24, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- servu-chmodcommand-execute-code(14931) vdb-entry
- 9483 vdb-entry
- 1008841 vdb-entry
- 9675 vdb-entry
- 20040126 Serv-U ftp 4.2 site chmod long_file_name exploit mailing-list
- 20040124 [SST]ServU MDTM command remote buffero verflow adv mailing-list