CVE-2004-2532 describes a critical vulnerability in Serv-U FTP Server versions prior to 5.1.0.0, where a default administrator account with a known password allows local users to execute arbitrary commands. This flaw carries a CVSS score of 10.0, indicating maximum severity with a network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog or currently active on the Hot List, an exploit for local privilege escalation is available on ExploitDB. Despite its age and high severity, there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.0.0.11CPE matchmatch criteria | cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:* | ||
3.0.0.16CPE matchmatch criteria | cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:* | ||
3.0.0.17CPE matchmatch criteria | cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:* | ||
3.1.0.0CPE matchmatch criteria | cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:* | ||
3.1.0.1CPE matchmatch criteria | cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.