CVE-2009-4006: Buffer Overflow
Published Nov 20, 2009
·Updated
Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.
Affected Software
28 affected components
SolarWinds Serv-u File Server=7.0.0.1
SolarWinds Serv-u File Server=7.0.0.2
SolarWinds Serv-u File Server=7.0.0.3
SolarWinds Serv-u File Server=7.0.0.4
SolarWinds Serv-u File Server=7.1.0.0
SolarWinds Serv-u File Server=7.1.0.1
SolarWinds Serv-u File Server=7.1.0.2
SolarWinds Serv-u File Server=7.2.0.0
SolarWinds Serv-u File Server=7.2.0.1
SolarWinds Serv-u File Server=7.3.0.0
SolarWinds Serv-u File Server=7.3.0.1
SolarWinds Serv-u File Server=7.3.0.2
SolarWinds Serv-u File Server=7.4.0.0
SolarWinds Serv-u File Server=7.4.0.1
SolarWinds Serv-u File Server=8.0.0.1
SolarWinds Serv-u File Server=8.0.0.2
SolarWinds Serv-u File Server=8.0.0.4
SolarWinds Serv-u File Server=8.0.0.5
SolarWinds Serv-u File Server=8.0.0.7
SolarWinds Serv-u File Server=8.1.0.1
SolarWinds Serv-u File Server=8.1.0.3
SolarWinds Serv-u File Server=8.2.0.0
SolarWinds Serv-u File Server=8.2.0.1
SolarWinds Serv-u File Server=8.2.0.3
SolarWinds Serv-u File Server=9.0.0.1
SolarWinds Serv-u File Server=9.0.0.3
SolarWinds Serv-u File Server=9.0.0.5
SolarWinds Serv-u File Server=9.1.0.0
Event History
Nov 20, 2009
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4006?
CVE-2009-4006 is considered critical due to its potential for remote code execution.
2
How do I fix CVE-2009-4006?
To fix CVE-2009-4006, upgrade to a version of RhinoSoft Serv-U FTP server that is 9.1.0.0 or higher.
3
What kind of vulnerability is CVE-2009-4006?
CVE-2009-4006 is a stack-based buffer overflow vulnerability in the TEA decoding algorithm.
4
Which versions of Serv-U FTP server are affected by CVE-2009-4006?
CVE-2009-4006 affects RhinoSoft Serv-U FTP server versions prior to 9.1.0.0.
5
Can CVE-2009-4006 be exploited remotely?
Yes, CVE-2009-4006 can be exploited by remote attackers using a crafted long hexadecimal string.