Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Serv-U < 9.2.0.1 User Directory Information Disclosure

Medium

Synopsis

The remote FTP server is affected by an information disclosure vulnerability.

Description

The remote FTP server is running Serv-U file Server, an FTP server for Windows. The installed version is earlier than 9.2.0.1. Such versions are potentially affected by an information disclosure vulnerability which could allow an attacker to view directories that are above the user's root directory.

Solution

Upgrade to Serv-U version 9.2.0.1 or later.