Directory Traversal Vulnerability in Serv-U FTP Server by Serv-U Technologies

CVE-2011-4800

Summary

A directory traversal vulnerability exists in the Serv-U FTP Server prior to version 11.1.0.5, allowing authenticated remote users to exploit the system. By sending specially crafted commands using the '..:/' sequence, attackers can gain unauthorized access to files and directories. This vulnerability not only permits the reading and writing of arbitrary files but also allows the listing and creation of directories, significantly compromising the security of the affected system.

References