CVE-2004-1675: Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via...

Security readout for executives and security teams

CVE-2004-1675 is a denial-of-service issue in Serv-U FTP server 4.x and 5.x. A remote attacker could trigger an application crash using a crafted file-store request involving reserved MS-DOS device names. The sources do not provide CVSS scoring, confirmed patch details, or evidence of active exploitation. Exposure is most likely where legacy Serv-U FTP 4.x or 5.x remains reachable, especially from untrusted networks. The provided affected-product metadata is incomplete, so asset confirmation is required before prioritizing remediation. Treat this as a legacy-service resilience risk. It is not proven actively exploited in the supplied sources, but internet-exposed FTP infrastructure running obsolete versions should be reviewed promptly because the impact is service outage. Mitigation focus: Inventory systems for Serv-U FTP server 4.x or 5.x.; Check vendor or current maintainer guidance for fixed versions or migration advice.; Restrict FTP access to trusted networks only..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.