CVE-2004-0330

Description

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.

Affected products

• SolarWinds / Serv-U File Server5.0.0.0
• SolarWinds / Serv-U File Server3.0.0.16 – 3.0.0.16
• SolarWinds / Serv-U File Server3.0.0.17 – 3.0.0.17
• SolarWinds / Serv-U File Server3.1.0.0 – 3.1.0.0
• SolarWinds / Serv-U File Server3.1.0.1 – 3.1.0.1
• SolarWinds / Serv-U File Server3.1.0.3 – 3.1.0.3
• SolarWinds / Serv-U File Server4.0.0.4 – 4.0.0.4
• SolarWinds / Serv-U File Server4.1.0.0 – 4.1.0.0
• SolarWinds / Serv-U File Server4.1.0.3 – 4.1.0.3

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/15323
• MISChttp://www.cnhonker.com/advisory/serv-u.mdtm.txt
• MAILING_LISThttp://marc.info/?l=bugtraq&m=107781164214399&w=2
• MISChttp://www.securityfocus.com/bid/9751