kkqq has reported a vulnerability in Serv-U FTP Server, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the handling of the "SITE CHMOD" command. This can be exploited by supplying an overly long (256 bytes) filename as argument, which causes a buffer overflow when constructing an error response.

Successful exploitation may reportedly allow execution of arbitrary code.

The vulnerability has been reported in versions prior to 5.0.

Solution
Upgrade to version 5.0.
Further details available in Customer Area

Provided and/or discovered by
kkqq

Changelog
Further details available in Customer Area

Original Advisory
http://www.0x557.org/release/servu.txt

Deep Links
Links available in Customer Area