PUBLISHED DATE: December 11, 2000CVE-2000-1033:
Serv-U FTP Server allows...

Description

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user (possibly anonymous) and then attempting to guess the passwords of other users.

Products

• Cat Soft Serv-U 2.5x

Questions to Ask Vendors

1. Can you confirm whether your systems are affected by CVE-2000-1033, and if so, what steps are you currently taking to mitigate this vulnerability?
2. What is your estimated timeline for fully resolving CVE-2000-1033 in your products or services, and how will you communicate updates on this issue to us as your customer?

Recommended Actions

• Check out the advisory links provided below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2000-1033