Serv U
by Cat Soft
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-1033 | 0.04 | — | 0.08 | Dec 11, 2000 | Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users. | |||
| CVE-1999-0219 | 0.04 | — | 0.09 | Jul 1, 1997 | Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | |||
| CVE-2000-0837 | 0.00 | — | 0.03 | Nov 14, 2000 | FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes. | |||
| CVE-2000-0176 | 0.00 | — | 0.02 | Feb 29, 2000 | The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist. |
- CVE-2000-1033Dec 11, 2000risk 0.04cvss —epss 0.08
Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.
- CVE-1999-0219Jul 1, 1997risk 0.04cvss —epss 0.09
Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.
- CVE-2000-0837Nov 14, 2000risk 0.00cvss —epss 0.03
FTP Serv-U 2.5e allows remote attackers to cause a denial of service by sending a large number of null bytes.
- CVE-2000-0176Feb 29, 2000risk 0.00cvss —epss 0.02
The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.