Serv-U is prone to denial-of-service and security-bypass vulnerabilities. Exploiting these issues can allow attackers to create directories without having sufficient permissions, or crash the affected application, resulting in denial-of-service conditions. Versions prior to Serv-U 10.2.0.0 are vulnerable.

Updates are available. Please see the references for more information.

• http://www.serv-u.com/
• http://www.serv-u.com/releasenotes/
• https://www.securityfocus.com/bid/42523

---

Updated on 2015-03-25