CVE-2011-4800
Serv-U File Server < 11.1.0.5 - Authenticated Path Traversal via Dot-Dot-Colon-Slash Sequence
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4800. PoCs published by kingcope.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Serv-U FTP Server versions prior to 11.1.0.5, allowing unauthorized access to files outside the intended directory structure. The PoC shows how an attacker can escape the FTP jail using path manipulation techniques.
Description
Directory traversal vulnerability in Serv-U FTP Server before 11.1.0.5 allows remote authenticated users to read and write arbitrary files, and list and create arbitrary directories, via a "..:/" (dot dot colon forward slash) in the (1) list, (2) put, or (3) get commands.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Serv-U FTP Server versions prior to 11.1.0.5, allowing unauthorized access to files outside the intended directory structure. The PoC shows how an attacker can escape the FTP jail using path manipulation techniques.