Local Privilege Escalation in Serv-U FTP Server by Serv-U Technologies

CVE-2004-2532

Summary

The Serv-U FTP server prior to version 5.1.0.0 contains a vulnerability due to a default account and password for local administration. This flaw allows unauthorized local users to gain elevated rights by connecting with the default administrator account. Once logged in, an attacker can create new user accounts and leverage the SITE EXEC command to execute arbitrary commands, potentially compromising system integrity and data security. Administrators are urged to update to the latest version and remove default credentials to mitigate this risk.

References