Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to t…

Exploit prediction (EPSS)

85.47% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

• Metasploit exploit/windows/ftp/servu_mdtm Serv-U FTPD MDTM Overflow · metasploit exploit, good rank · 2004-02-26
• EDB-23763 RhinoSoft Serv-U FTPd Server 3/4/5 - MDTM Command Time Argument Buffer Overflow (4) · remote · 2004-02-26
• EDB-23762 RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (3) · dos · 2004-02-26
• EDB-23761 RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (2) · dos · 2004-02-26
• EDB-23760 RhinoSoft Serv-U FTPd Server 3/4/5 - 'MDTM' Time Argument Buffer Overflow (1) · dos · 2004-02-26
• EDB-16715 RhinoSoft Serv-U FTPd Server - MDTM Overflow (Metasploit) · remote · 2010-09-20
• EDB-158 RhinoSoft Serv-U FTPd Server 3.x/4.x/5.x - 'MDTM' Remote Overflow · remote · 2004-02-27

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• exchange.xforce.ibmcloud.com /vulnerabilities/15323 · vdb-entry, x_refsource_XF, x_transferred
• cnhonker.com /advisory/serv-u.mdtm.txt · x_refsource_MISC, x_transferred
• marc.info /?l=bugtraq&m=107781164214399&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
• securityfocus.com /bid/9751 · vdb-entry, x_refsource_BID, x_transferred

Sources

• CVE List: CVE-2004-0330
• NVD: CVE-2004-0330

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.