← Database

CVE-2009-4006

CRITICAL CVSS: 10.0 Published: 2009-11-20 Modified: 2026-06-16

Description

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.

Affected Platforms

Solarwinds Serv-U File Server

Weakness Type

CWE-119

References