CVE-2009-3655: SolarWinds Serv-U File Server

Medium severity, CVSS 5.0. EPSS: 4% chance of exploitation in the next 30 days.

Rhino Software Serv-U 7.0.0.1 through 8.2.0.3 allows remote attackers to cause a denial of service (server crash) via unspecified vectors related to the "SITE SET TRANSFERPROGRESS ON" FTP command.

Affected products

• SolarWinds Serv-U File Server: version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.1.0.0 only; version 7.1.0.1 only; …

Published 2009-10-09. Last modified 2026-06-16.