Serv-U is prone to multiple security vulnerabilities including security- bypass issues and a denial-of-service issue. Attackers can exploit this issue to bypass certain security restrictions or crash the affected application. Versions prior to Serv-U 9.4.0.0 are vulnerable.

The vendor has released an update. Please see the references for details.

• http://www.securityfocus.com/bid/38923
• http://www.serv-u.com/
• http://www.serv-u.com/releasenotes/

---

Updated on 2015-03-25