$ cve CVE-2004-2111 JSON

CVE-2004-2111 EXPLOIT

8.5

HIGH · CVSS 2.0 · EPSS 86.9% (pctl 100)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.

Scoring

CVSS	8.5 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:S/C:C/I:C/A:C
EPSS	86.87% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2004-12-31
Last modified	2026-06-16

Affected (1)

Vendor	Product
solarwinds	serv-u file server

Public exploits

Source	Title	Date
exploit-db	RhinoSoft Serv-U FTPd Server < 4.2 - Remote Buffer Overflow (Metasploit)	2011-12-02
exploit-db	RhinoSoft Serv-U FTPd Server 4.x - 'site chmod' Remote Buffer Overflow	2004-01-30
exploit-db	RhinoSoft Serv-U FTPd Server 3.x/4.x - 'SITE CHMOD' Remote Overflow	2004-01-27
exploit-db	RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (2)	2004-01-25
exploit-db	RhinoSoft Serv-U FTPd Server 3/4 - MDTM Command Stack Overflow (1)	2004-01-24

References

→ the Explorer · watch your stack · NVD