CVE-2004-2533: Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application cras...

Security readout for executives and security teams

CVE-2004-2533 is an old remote denial-of-service issue in Serv-U FTP Server 4.1, and possibly 4.0. A malformed FTP SITE CHMOD request can crash the application. The sources do not provide CVSS scoring, a named patch, or evidence of active exploitation. Exposure is most likely limited to organizations still running legacy Serv-U FTP Server 4.1 or possibly 4.0, especially if FTP is reachable from untrusted networks. The affected CPE data is incomplete in the source bundle. Prioritize if legacy Serv-U FTP is exposed externally or supports critical file transfer workflows. The likely business risk is service outage rather than confirmed data theft, but unsupported FTP infrastructure deserves remediation planning. Mitigation focus: Identify any Serv-U FTP Server 4.1 or 4.0 instances.; Check current vendor guidance for supported upgrade or mitigation options.; Restrict FTP access to trusted networks where business permits..

Prepared

Jun 29, 2026, 17:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.