Intrusion PreventionServ-U.FTP.Server.RNTO.Directory.Traversal
Description
This indicates an attempt to exploit a directory traversal vulnerability in the Rhino Software Serv-U FTP Server.
The vulnerability is caused by an error that occurs when the vulnerable software handles a malformed RNTO command. It allows a remote attacker to write arbitrary files to any location on the vulnerable server.
Affected Products
RhinoSoft Serv-U 7.2 1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Update to version 7.3.0.1:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 16016 |
| Created | Dec 18, 2008 |
| Updated | May 04, 2022 |
| Risk |
|
| CVE ID | CVE-2008-4501 |
| Exploit Prediction Score | 1.59% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |