CVE-2004-2532

Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

15.25% chance of exploitation in the next 30 days, 97th percentile

Published

2005-10-25

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/381

References

• CVE Record
• NVD entry

Related

• CVE-2004-2530
• CVE-2004-2534
• CVE-2004-2528
• CVE-2004-2547
• CVE-2004-2526
• CVE-2004-2548