CVE-2019-12181

Mô tả

Tham khảo

• packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.html · Exploit
• packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.html · Exploit
• blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.html · Broken Link
• documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-1-7_release_notes.htm · Release Notes
• support.solarwinds.com/SuccessCenter/s/article/Serv-U-Potential-elevation-of-privileges-on-Linux-systems · Vendor Advisory

Lỗ hổng khác của serv-u ftp server

• CVE-2020-22428TRUNG BÌNH 4.8SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a J…
• CVE-2020-15543NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 does not validate an argument path.
• CVE-2020-15542NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 mishandles the CHMOD command.
• CVE-2020-15541NGHIÊM TRỌNG 9.8SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution.
• CVE-2019-19829TRUNG BÌNH 5.4A cross-site scripting (XSS) vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability t…