Intrusion PreventionServ-U.FTP.Server.RNTO.Path.Traversal
Description
This indicates an attempt to exploit a directory traversal vulnerability in the Rhino Software Serv-U FTP Server.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malformed RNTO command. It allows a remote attacker to write arbitrary files to any location on the vulnerable server.
Affected Products
RhinoSoft Serv-U 7.2 1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Update to version 7.3.0.1:
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-07-25 | 28.833 |
Modified
|
Name:Serv-U. FTP. Server. RNTO. Directory. Traversal:Serv-U. FTP. Server. RNTO. Path. Traversal |
| ID | 16016 |
| Created | Dec 18, 2008 |
| Updated | Jul 23, 2024 |
| CVE ID | |
| Risk |
|
| Exploit Prediction Score | 4.6% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Path Traversal |