Unscored CVE-2018-15906 EUVD-2018-7762GHSA-6v7c-w9v8-4qwf

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modify…

Published Mar 17, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file.

References

http://packetstormsecurity.com/files/151473/SolarWinds-Serv-U-FTP-15.1.6-Privilege-Escalation.html
http://seclists.org/fulldisclosure/2019/Feb/4
http://www.securityfocus.com/bid/106844