CORE IMPACT - Support :: The First Penetration Testing Framework

Serv-U chmod exploit v1.12

Vulnerability exploited: NOCVE-2004-6924 - BID-9675

Category: Exploits/Remote

This module exploits a buffer overflow and installs a level0 agent into the target host.
An internal memory buffer may be overrun while handling "site chmod" command with an overly long filename. This condition may be exploited by attackers to ultimately execute instructions with the privileges of the serv-u process, typically administrator or system.This bug requires the FTP user to have write privileges on at least one directory to be exploited.The Serv-U server will be left inaccessible after successful exploitation.

Supported Systems:

This module is included in the latest version of CORE IMPACT, the first automated comprehensive penetration testing product for accurately identifying information security risks. Click here to learn more about the product.