CVE-2009-4873: Rhinosoft Serv-U

High severity, CVSS 10.0. EPSS: 20.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.

Affected products

• Rhinosoft Serv-U: version 9.0.0.5 only

Published 2010-05-26. Last modified 2026-06-16.