SolarWinds Serv-U FTP Server Multiple Security Vulnerabilities

Bugtraq ID:	67826
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 04 2014 12:00AM
Updated:	Jun 04 2014 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:
Not Vulnerable:

SolarWinds Serv-U FTP Server Multiple Security Vulnerabilities

Serv-U FTP Server is prone to the following security vulnerabilities:

1. An unspecified cross-site scripting vulnerability
2. An information-disclosure vulnerability
3. Multiple unspecified security vulnerabilities

Very limited information is currently available regarding these issues. We will update this BID as more information emerges.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to steal cookie-based authentication credentials, and to obtain sensitive information. This may aid in further attacks.

SolarWinds Serv-U FTP Server Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues.

SolarWinds Serv-U FTP Server Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SolarWinds Serv-U FTP Server Multiple Security Vulnerabilities

References: