Serv-U File Server User Directory Information Disclosure Vulnerability

Bugtraq ID:	37414
Class:	Unknown
CVE:	CVE-2009-4815
Remote:	Yes
Local:	No
Published:	Dec 18 2009 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	Reported by the vendor
Vulnerable:	Serv-U File Server 9.1.0.4 Serv-U File Server 9.1.0.2 Serv-U File Server 9.1.0.0 Serv-U File Server 9.0.0.5 Serv-U File Server 9.0.0.3 Serv-U File Server 9.0.0.1 Serv-U File Server 9.0.0.0
Not Vulnerable:	Serv-U File Server 9.2.0.1

Serv-U File Server User Directory Information Disclosure Vulnerability

Serv-U File Server is prone to an unspecified information-disclosure vulnerability.

Attackers can exploit this issue to harvest sensitive information that may lead to further attacks.

Versions prior to SERV-U File Server 9.2.0.1 are vulnerable.

Serv-U File Server User Directory Information Disclosure Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Serv-U File Server User Directory Information Disclosure Vulnerability

Solution:
The vendor has released an update. Please see the references for details.

Serv-U File Server User Directory Information Disclosure Vulnerability

References:

• Serv-U File Server Release Notes (Serv-U)
  
• Vendor Homepage (Serv-U)