What’s Vulnerable › Vulnerabilities

CVE-2009-3655

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-10-09 · updated 2026-06-16

Description

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.

Affected products

• SolarWinds Serv-U File Server: 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.1.0.0, 7.1.0.1 (+18)

References

• http://secunia.com/advisories/36873
• http://www.serv-u.com/releasenotes/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798
• http://secunia.com/advisories/36873
• http://www.serv-u.com/releasenotes/
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5798

Get alerted when CVE-2009-3655 or the next vulnerability affects your stack