← All CVEs

CVE-2004-1675

medium · 5

Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.

5
CVSS
12.4%
EPSS (exploit prob.)
96th
EPSS percentile
2004-09-11
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
solarwindsserv-u_file_server4.0.0.4
solarwindsserv-u_file_server4.1.0.0
solarwindsserv-u_file_server4.1.0.3
solarwindsserv-u_file_server5.0.0.0
solarwindsserv-u_file_server5.0.0.4
solarwindsserv-u_file_server5.0.0.9
solarwindsserv-u_file_server5.0.0.11
solarwindsserv-u_file_server5.1.0.0
solarwindsserv-u_file_server5.2.0.0
solarwindsserv-u_file_server5.2.0.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-1675