CVE-2004-1992

Solarwinds Serv-u File Server < 5.0.0.4 - Memory Corruption

Title source: rule

Description

Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.

Exploits (1)

exploitdb WORKING POC VERIFIED

by storm · perldoswindows

https://www.exploit-db.com/exploits/24029

View Code ZIP pw:eip

References (8)

[Mailing List] http://marc.info/?l=bugtraq&m=108360377119290&w=2

[Exploit, Vendor Advisory] http://www.securityfocus.com/bid/10181

[Exploit, Vendor Advisory] http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html

[Exploit, Patch, Vendor Advisory] http://secunia.com/advisories/11430

[Mailing List] http://marc.info/?l=ntbugtraq&m=108359620108234&w=2

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/15913

[Third Party Advisory, VDB Entry] http://www.osvdb.org/5546

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1009869

Scores

EPSS 0.1138

EPSS Percentile 93.6%

Details

CWE

CWE-119

Status published

Products (10)

solarwinds/serv-u_file_server 3.0.0.16

solarwinds/serv-u_file_server 3.0.0.17

solarwinds/serv-u_file_server 3.1.0.0

solarwinds/serv-u_file_server 3.1.0.1

solarwinds/serv-u_file_server 3.1.0.3

solarwinds/serv-u_file_server 4.0.0.4

solarwinds/serv-u_file_server 4.1.0.0

solarwinds/serv-u_file_server 4.1.0.3

solarwinds/serv-u_file_server 5.0.0.0

solarwinds/serv-u_file_server < 5.0.0.4

Published Apr 20, 2004

Tracked Since Feb 18, 2026