Serv-U File Server is prone to an unspecified information-disclosure vulnerability. Attackers can exploit this issue to harvest sensitive information that may lead to further attacks. Versions prior to SERV-U File Server 9.2.0.1 are vulnerable.

The vendor has released an update. Please see the references for details.

• http://www.securityfocus.com/bid/37414
• http://www.serv-u.com/
• http://www.serv-u.com/releasenotes/

---

Updated on 2015-03-25