RhinoSoft Serv-U FTP Server 'MKD' Command Directory Traversal Vulnerability

Bugtraq ID:	34125
Class:	Input Validation Error
CVE:	CVE-2009-1031
Remote:	Yes
Local:	No
Published:	Mar 16 2009 12:00AM
Updated:	Nov 20 2009 05:05PM
Credit:	Jonathan Salwan
Vulnerable:	Rhino Software Serv-U 7.4.0.1
Not Vulnerable:

RhinoSoft Serv-U FTP Server 'MKD' Command Directory Traversal Vulnerability

RhinoSoft Serv-U FTP Server is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting this issue allows an authenticated user to create directories outside the FTP root directory, which may lead to other attacks.

Serv-U FTP Server 7.4.0.1 is vulnerable; other versions may also be affected.

RhinoSoft Serv-U FTP Server 'MKD' Command Directory Traversal Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to connect to a malicious server.

The following exploit code is available:

• /data/vulnerabilities/exploits/34125.pl

RhinoSoft Serv-U FTP Server 'MKD' Command Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RhinoSoft Serv-U FTP Server 'MKD' Command Directory Traversal Vulnerability

References:

• Serv-U Homepage (RhinoSoft)