Serv-U FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to read arbitrary files from locations outside of the application's current directory. This could help the attacker launch further attacks.

• http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0454.html
• http://osvdb.org/77422
• http://secunia.com/advisories/47021
• http://www.exploit-db.com/exploits/18182
• http://www.securityfocus.com/bid/50875
• http://xforce.iss.net/xforce/xfdb/71583

---

Updated on 2015-03-25