A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| http://packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| https://blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.html | Broken Link |
| https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-1-7_release_notes.htm | Release Notes Vendor Advisory |
| https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-Potential-elevation-of-privileges-on-Linux-systems | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jan 2023, 16:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.html - Broken Link | |
| References | (MISC) http://packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2019-06-17 16:15
Updated : 2023-12-10 12:59
NVD link : CVE-2019-12181
Mitre link : CVE-2019-12181
CVE.ORG link : CVE-2019-12181
JSON object : View
Products Affected
solarwinds
- serv-u_ftp_server
- serv-u_mft_server
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')