Serv U
Vendor:
First CVE: Jul 1, 1997 · Active for 29 years
3
Total CVEs
More Total CVEs than 64% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 56% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 36% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Serv U over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 1, 1997
29 years ago
Most Recent CVE
Dec 11, 2000
9,357 days ago
CVE Severity & Scoring
Serv U3 CVEs
33%
67%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown3 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown3 (100.0%)
User Interaction
None0 (0.0%)
Unknown3 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown3 (100.0%)
Top CVEs
Signals from CVEs in this product scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-1999-0219HIGH Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command. | Jul 1, 1997 | 7.8 | 33 | NO | YES |
CVE-2000-1033HIGH Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords o | Dec 11, 2000 | 7.5 | 31 | NO | YES |
CVE-2000-0176MEDIUM The default configuration of Serv-U 2.5d and earlier allows remote attackers to determine the real pathname of the server by requesting a URL for a directory or file that does not | Feb 29, 2000 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (3 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
66.7% of CVEs· 93rd percentile
Social Chatter
Signals from CVEs in this product scope (3 CVEs).
Media Mentions
Signals from CVEs in this product scope (3 CVEs).
Top CNAs Publishing CVEs For Serv U
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.5x | 1 | 7.5 | 7.6% | 0 | 1 |
| 2.5d | 1 | 5.0 | 2.1% | 0 | 0 |
| 2.5c | 1 | 5.0 | 2.1% | 0 | 0 |
| 2.5b | 1 | 5.0 | 2.1% | 0 | 0 |
| 2.5a | 1 | 5.0 | 2.1% | 0 | 0 |
| 2.5 | 2 | 6.4 | 5.6% | 0 | 1 |
| 2.4 | 1 | 5.0 | 2.1% | 0 | 0 |