Vulnerabilities > Solarwinds > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-06-16 | CVE-2010-2310 | Improper Input Validation vulnerability in Solarwinds Tftp Server 10.4.0.13 SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request. | 5.0 |
2010-05-28 | CVE-2010-2115 | Improper Input Validation vulnerability in Solarwinds Tftp Server 10.4.0.10 SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request. | 5.0 |
2010-04-27 | CVE-2009-4815 | Path Traversal vulnerability in Solarwinds Serv-U File Server Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors. | 4.0 |
2009-10-09 | CVE-2009-3655 | Denial-Of-Service vulnerability in Serv-U Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command. | 5.0 |
2009-09-09 | CVE-2009-3115 | Improper Input Validation vulnerability in Solarwinds Tftp Server SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. | 5.0 |
2009-03-19 | CVE-2009-0967 | Resource Management Errors vulnerability in Solarwinds Serv-U File Server The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument. | 4.0 |
2008-10-09 | CVE-2008-4500 | Improper Input Validation vulnerability in Solarwinds Serv-U File Server Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1". | 4.0 |
2008-08-20 | CVE-2008-3731 | Remote Denial of Service vulnerability in RhinoSoft Serv-U SFTP Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service (daemon crash) via an SSH session with SFTP commands for directory creation and logging. | 4.0 |
2006-04-24 | CVE-2006-1951 | Directory Traversal vulnerability in Solarwinds Tftp Server 5.0.55Standard/5.0.60Standard/8.1 Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering. | 5.0 |
2005-11-02 | CVE-2005-3467 | Improper Input Validation vulnerability in Solarwinds Serv-U File Server Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of "~" in a pathname, and (3) memory consumption of the daemon. | 5.0 |