CVE-2009-4006: SolarWinds Serv-U File Server

High severity, CVSS 10.0. EPSS: 82.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.

Affected products

• SolarWinds Serv-U File Server: version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.1.0.0 only; version 7.1.0.1 only; …

Published 2009-11-20. Last modified 2026-06-16.