CVE-2004-2111
Serv-U FTP Server <4.2 - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
Exploits (6)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18190
exploitdb
WORKING POC
VERIFIED
https://www.exploit-db.com/exploits/23592
exploitdb
WORKING POC
VERIFIED
by mandragore · cremotewindows
https://www.exploit-db.com/exploits/23591
metasploit
WORKING POC
NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/servu_chmod.rb
References (6)
Scores
EPSS
0.8114
EPSS Percentile
99.2%
Details
CWE
CWE-119
Status
published
Products (8)
solarwinds/serv-u_file_server
3.0.0.16
solarwinds/serv-u_file_server
3.0.0.17
solarwinds/serv-u_file_server
3.1.0.0
solarwinds/serv-u_file_server
3.1.0.1
solarwinds/serv-u_file_server
3.1.0.3
solarwinds/serv-u_file_server
4.0.0.4
solarwinds/serv-u_file_server
4.1.0.0
solarwinds/serv-u_file_server
< 4.1.0.3
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026