Stack-based Buffer Overflow in RhinoSoft Serv-U FTP Server

CVE-2009-4006

Summary

A stack-based buffer overflow exists in the TEA decoding algorithm of the RhinoSoft Serv-U FTP Server, allowing remote attackers to execute arbitrary code. Exploitation is possible through the sending of an incorrectly formatted long hexadecimal string, leading to a potential compromise of the affected system. This vulnerability affects multiple versions of the Serv-U FTP Server prior to the security update in version 9.1.0.0, thus posing a significant risk to users that have not applied the necessary patches.

References