CVE-2008-4500: Input Validation
Published Oct 8, 2008
·Updated
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1".
Affected Software
12 affected components
SolarWinds Serv-u File Server=7.0.0.1
SolarWinds Serv-u File Server=7.0.0.2
SolarWinds Serv-u File Server=7.0.0.3
SolarWinds Serv-u File Server=7.0.0.4
SolarWinds Serv-u File Server=7.1.0.0
SolarWinds Serv-u File Server=7.1.0.1
SolarWinds Serv-u File Server=7.1.0.2
SolarWinds Serv-u File Server=7.2.0.0
SolarWinds Serv-u File Server=7.2.0.1
SolarWinds Serv-u File Server=7.3.0.0
SolarWinds Serv-u File Server=7.3.0.1
SolarWinds Serv-u File Server=7.3.0.2
Event History
Oct 8, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4500?
CVE-2008-4500 is categorized as a denial of service vulnerability.
2
How do I fix CVE-2008-4500?
To mitigate CVE-2008-4500, it is recommended to upgrade to a patched version of the Serv-U File Server.
3
Which versions are affected by CVE-2008-4500?
CVE-2008-4500 affects Serv-U File Server versions 7.0.0.1 through 7.3.0.2, including some specific minor versions.
4
What attack vector is used for CVE-2008-4500?
CVE-2008-4500 can be exploited by remote authenticated users using a crafted stou command.
5
What type of impact does CVE-2008-4500 have?
The impact of CVE-2008-4500 is high due to its potential to consume CPU resources and cause service disruption.