← Database

CVE-2008-4501

CRITICAL CVSS: 9.0 Published: 2008-10-09 Modified: 2026-06-16

Description

Directory traversal vulnerability in the FTP server in Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to overwrite or create arbitrary files via a ..\ (dot dot backslash) in the RNTO command.

Affected Platforms

Solarwinds Serv-U File Server

Weakness Type

CWE-22

References