CVE-2004-2111

Serv-U FTP Server <4.2 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.

Exploits (6)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18190
exploitdb WORKING POC VERIFIED
by Skylined · cremotewindows
https://www.exploit-db.com/exploits/822
exploitdb WORKING POC VERIFIED
by lion · cremotewindows
https://www.exploit-db.com/exploits/149
exploitdb WORKING POC VERIFIED
by [email protected] · cremotewindows
https://www.exploit-db.com/exploits/23592
exploitdb WORKING POC VERIFIED
by mandragore · cremotewindows
https://www.exploit-db.com/exploits/23591
metasploit WORKING POC NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/servu_chmod.rb

Scores

EPSS 0.8114
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (8)
solarwinds/serv-u_file_server 3.0.0.16
solarwinds/serv-u_file_server 3.0.0.17
solarwinds/serv-u_file_server 3.1.0.0
solarwinds/serv-u_file_server 3.1.0.1
solarwinds/serv-u_file_server 3.1.0.3
solarwinds/serv-u_file_server 4.0.0.4
solarwinds/serv-u_file_server 4.1.0.0
solarwinds/serv-u_file_server < 4.1.0.3
Published Dec 31, 2004
Tracked Since Feb 18, 2026