The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not exist.
> AFFECTED_PRODUCTS
Cat Soft - Serv U
Version: 2.4
Cat Soft - Serv U
Version: 2.5
Cat Soft - Serv U
Version: 2.5a
Cat Soft - Serv U
Version: 2.5b
Cat Soft - Serv U
Version: 2.5c
Cat Soft - Serv U
Version: 2.5d
> HISTORIQUE DES MODIFICATIONS
Première apparition
29/02/2000 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 14:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago