CVE-2004-0330

Serv-U ftp <5.0.0.4 - RCE

Title source: llm

Description

Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.

Exploits (7)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16715
exploitdb WORKING POC VERIFIED
by Sam · cremotewindows
https://www.exploit-db.com/exploits/158
exploitdb WORKING POC VERIFIED
by lion · cremotewindows
https://www.exploit-db.com/exploits/23763
exploitdb WORKING POC VERIFIED
by shaun2k2 · cdoswindows
https://www.exploit-db.com/exploits/23762
exploitdb WORKING POC VERIFIED
by shaun2k2 · cdoswindows
https://www.exploit-db.com/exploits/23761
exploitdb WORKING POC VERIFIED
by saintjmf · perldoswindows
https://www.exploit-db.com/exploits/23760
metasploit WORKING POC GOOD
by spoonm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/servu_mdtm.rb

Scores

EPSS 0.8314
EPSS Percentile 99.3%

Details

CWE
CWE-119
Status published
Products (9)
solarwinds/serv-u_file_server 3.0.0.16
solarwinds/serv-u_file_server 3.0.0.17
solarwinds/serv-u_file_server 3.1.0.0
solarwinds/serv-u_file_server 3.1.0.1
solarwinds/serv-u_file_server 3.1.0.3
solarwinds/serv-u_file_server 4.0.0.4
solarwinds/serv-u_file_server 4.1.0.0
solarwinds/serv-u_file_server 4.1.0.3
solarwinds/serv-u_file_server < 5.0.0.0
Published Nov 23, 2004
Tracked Since Feb 18, 2026