CVE-2009-1031

EPSS 11.2%

Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \.. (backslash dot dot) in an MKD request.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/8211unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/52773 http://secunia.com/advisories/34329 https://exchange.xforce.ibmcloud.com/vulnerabilities/49258 https://www.exploit-db.com/exploits/8211 http://www.securityfocus.com/bid/34125 http://www.vupen.com/english/advisories/2009/0738