Denial of Service Vulnerability in Serv-U FTP Server by RhinoSoft

CVE-2002-2393

Summary

The Serv-U FTP server versions 3.0, 3.1, and 4.0.0.4 exhibit a vulnerability that hampers the acceptance of new connections when validating user folder access rights. An attacker can exploit this flaw by sending a stream of MKD commands, ultimately leading to a denial of service condition where no new connections can be established. This vulnerability can severely affect the availability of services for users relying on the FTP server.

References