CVE-2009-3655

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-10-09

Last modified

2024-08-07

Affected products

• Serv-u File Server (Solarwinds)

References

• http://secunia.com/advisories/36873
• http://www.serv-u.com/releasenotes/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798