* All Serv-u Versions have default Login/password for local Administration.
* This account is only available to connect in the loopback interface, so a
* local user will be able to connect to Serv-u with this account and create
* an ftp user with execute rights. after the user is created, just connect
* to the ftp server and execute a raw "SITE EXEC" command. the program will
* be execute with SYSTEM privileges.

http://www.k-otik.com/exploits/08082004.ServuLocal.c.php

hm just local exploit....thx 4 posting

[QUOTE] hm just local exploit[QUOTE]


If u have a remote shell u work local too


Greetz Imps2

mmm ok

i meditate to change my local ftp server

tnx for info

privelege escalation exploits are the most adventerous, dont know why ppl complain so much about them, get up from the compy and go out into the real world and audit computers in your local library, school, net cafe's etc. its up to you.