Denial of Service in Serv-U FTP Server by Authenticated Users

CVE-2008-4500

Summary

The Serv-U FTP Server is prone to a denial of service vulnerability that allows remote authenticated users to trigger excessive CPU consumption. This is achieved by sending a specially crafted STOR command, which exploits the handling of MS-DOS device names, notably through the identifier 'con:1'. Successful exploitation may lead to degradation of service and impact availability. Organizations using affected versions should promptly assess their security posture and apply necessary mitigations.

References