Vulnerabilities > Solarwinds > Medium

DATE CVE VULNERABILITY TITLE RISK
2010-06-16 CVE-2010-2310 Improper Input Validation vulnerability in Solarwinds Tftp Server 10.4.0.13
SolarWinds TFTP Server 10.4.0.13 allows remote attackers to cause a denial of service (crash) via a long write request.
network
low complexity
solarwinds CWE-20
5.0
2010-05-28 CVE-2010-2115 Improper Input Validation vulnerability in Solarwinds Tftp Server 10.4.0.10
SolarWinds TFTP Server 10.4.0.10 allows remote attackers to cause a denial of service (no new connections) via a crafted read request.
network
low complexity
solarwinds CWE-20
5.0
2010-04-27 CVE-2009-4815 Path Traversal vulnerability in Solarwinds Serv-U File Server
Directory traversal vulnerability in Serv-U before 9.2.0.1 allows remote authenticated users to read arbitrary files via unspecified vectors.
network
low complexity
solarwinds CWE-22
4.0
2009-10-09 CVE-2009-3655 Denial-Of-Service vulnerability in Serv-U
Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.
network
low complexity
solarwinds
5.0
2009-09-09 CVE-2009-3115 Improper Input Validation vulnerability in Solarwinds Tftp Server
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request.
network
low complexity
solarwinds CWE-20
5.0
2009-03-19 CVE-2009-0967 Resource Management Errors vulnerability in Solarwinds Serv-U File Server
The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument.
network
low complexity
solarwinds CWE-399
4.0
2008-10-09 CVE-2008-4500 Improper Input Validation vulnerability in Solarwinds Serv-U File Server
Serv-U 7.0.0.1 through 7.3, including 7.2.0.1, allows remote authenticated users to cause a denial of service (CPU consumption) via a crafted stou command, probably related to MS-DOS device names, as demonstrated using "con:1".
network
low complexity
solarwinds CWE-20
4.0
2008-08-20 CVE-2008-3731 Remote Denial of Service vulnerability in RhinoSoft Serv-U SFTP
Unspecified vulnerability in Serv-U File Server 7.0.0.1, and other versions before 7.2.0.1, allows remote authenticated users to cause a denial of service (daemon crash) via an SSH session with SFTP commands for directory creation and logging.
network
low complexity
solarwinds
4.0
2006-04-24 CVE-2006-1951 Directory Traversal vulnerability in Solarwinds Tftp Server 5.0.55Standard/5.0.60Standard/8.1
Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.
network
low complexity
solarwinds
5.0
2005-11-02 CVE-2005-3467 Improper Input Validation vulnerability in Solarwinds Serv-U File Server
Serv-U FTP Server before 6.1.0.4 allows attackers to cause a denial of service (crash) via (1) malformed packets and possibly other unspecified issues with unknown impact and attack vectors including (2) use of "~" in a pathname, and (3) memory consumption of the daemon.
network
low complexity
solarwinds CWE-20
5.0