Tools

Serv-U 15.1.6 HotFix 1

This SolarWinds hot fix addresses the following security and functionality issues: incomplete files list returned from a LIST command; a possible crash of the server after malformed login POST request; a potential issue with an unauthorized access to the files.

First published date

2/27/2019 4:15 PM

Last published date

2/27/2019 4:15 PM

Overview

This SolarWinds hot fix addresses the following security and functionality issues:

  • incomplete files list returned from a LIST command
  • a possible crash of the server after malformed login POST request
  • a potential issue with an unauthorized access to the files

Product section

Serv-U Managed File Transfer & Serv-U FTP Server

Resolution

Requirements 

This fix requires updating only Serv-U. Within the Serv-U folder there is a folder for each supported platform. Please use the files for your appropriate platform when updating Serv-U. The folder contains files with the appropriate directory structure (if necessary) to upgrade your installation.

This fix requires Serv-U version 15.1.6.25

This fix contains five files for Windows and one file for Linux:

Windows:

<Serv-U-InstallDir>\Serv-U.exe 
<Serv-U-InstallDir>\Serv-U.dll
<Serv-U-InstallDir>\Serv-U-RES.dll
<Serv-U-InstallDir>\RhinoNET.dll
<Serv-U-InstallDir>\RhinoRES.dll

Linux:

<Serv-U-InstallDir>/Serv-U

Install the HotFix    

  1. Shut down all running Serv-U processes. 
    1. Right-click the tray icon, and select Stop Serv-U.
    2. Right-click the tray icon, and select Exit Tray.
  2. Navigate to the Serv-U installation directory:

For Windows, the default installation directory is:

C:\Program Files\RhinoSoft\Serv-U

or:

C:\Program Files\RhinoSoft.com\Serv-U

For Linux, the default installation directory is:

/usr/local/Serv-U

  1. Back up the following files in the installation directory to a separate location:

Windows:

Serv-U.exe 
Serv-U.dll
Serv-U-RES.dll
RhinoNET.dll
RhinoRES.dll
Linux: 
Serv-U
  1. Extract the hot fix .zip file to a temporary location.
  2. Open the folder in the extracted hot fix for the platform Serv-U is installed on.
For example, open the Windows 64-bit folder if Serv-U is installed on a 64-bit version of Windows.
On Linux, modify the permissions of the files by executing the following command:

      chmod u+xs Serv-U

  1. Copy the hot fix contents to the Serv-U installation directory, overwriting the existing files.
  2. Restart the Serv-U tray application. 
  3. Right-click the tray icon and select Start Serv-U. 

The hotfix is installed.

Result 

  • The LIST command returns a proper files list.
  • The server is not vulnerable to unauthorized access.
  • The server does not crash.

Uninstall the HotFix 

  1. Shut down all running Serv-U processes. 
    1. Right-click the tray icon, and select Stop Serv-U. 
    2. Right-click the tray icon, and select Exit Tray.
  2. Locate the files backed up during the installation procedure above.
  3. Navigate to the Serv-U installation directory:

For Windows, the default installation directory is:

C:\Program Files\RhinoSoft\Serv-U

or:

C:\Program Files\RhinoSoft.com\Serv-U

For Linux, the default installation directory is:

/usr/local/Serv-U
  1. Copy the backed up to the Serv-U installation directory, overwriting the existing files.
  2. Restart the Serv-U tray application. 
  3. Right-click the tray icon, and select Start Serv-U. 

    The Hot Fix is uninstalled.

For more information, contact Technical Support at https://www.serv-u.com/support