Submit a ticketCall us

WebinarDatabase Roundtable – Expert Database Professionals Feel Your Pain

In this video broadcast, Head Geek™ Tom LaRock is joined by Karen Lopez, Tim Chapman, and David Klee. They’ve known each other for many years, so this discussion was like four friends getting together to talk data and databases. They discussed diagnostic data collection, common performance root causes, reactive tuning versus proactive, and more. Join us for an engaging discussion on these topics! Plus, Tom LaRock will be available to answer your questions live.

Register now.

Home > Success Center > Serv-U Managed File Transfer & Serv-U FTP Server > Serv-U Managed FTS & FTP Documentation > Serv-U 15.1.6 HotFix 1

Serv-U 15.1.6 HotFix 1

Updated January 25th 2017

Overview

This SolarWinds hot fix addresses the following security and functionality issues:

  • incomplete files list returned from a LIST command
  • a possible crash of the server after malformed login POST request
  • a potential issue with an unauthorized access to the files

Requirements

This fix requires updating only Serv-U. Within the Serv-U folder there is a folder for each supported platform. Please use the files for your appropriate platform when updating Serv-U. The folder contains files with the appropriate directory structure (if necessary) to upgrade your installation.

This fix requires Serv-U version 15.1.6.25

This fix contains five files for Windows and one file for Linux:

Windows:

  • <Serv-U-InstallDir>\Serv-U.exe 
  • <Serv-U-InstallDir>\Serv-U.dll
  • <Serv-U-InstallDir>\Serv-U-RES.dll
  • <Serv-U-InstallDir>\RhinoNET.dll
  • <Serv-U-InstallDir>\RhinoRES.dll

Linux:

  • <Serv-U-InstallDir>/Serv-U

Install the HotFix   

  1. Shut down all running Serv-U processes. 
    • Right-click the tray icon, and select Stop Serv-U.
    • Right-click the tray icon, and select Exit Tray.
  2. Navigate to the Serv-U installation directory:

    For Windows, the default installation directory is:

    C:\Program Files\RhinoSoft\Serv-U

    or:

    C:\Program Files\RhinoSoft.com\Serv-U

    For Linux, the default installation directory is:
    /usr/local/Serv-U

    1. Back up the following files in the installation directory to a separate location:

    Windows:

    • Serv-U.exe 
    • Serv-U.dll
    • Serv-U-RES.dll
    • RhinoNET.dll
    • RhinoRES.dll

    Linux:

    • Serv-U
    1. Extract the hot fix .zip file to a temporary location.
    2. Open the folder in the extracted hot fix for the platform Serv-U is installed on.

    For example, open the Windows 64-bit folder if Serv-U is installed on a 64-bit version of Windows.

    1. On Linux, modify the permissions of the files by executing the following command:

          chmod u+xs Serv-U

    1. Copy the hot fix contents to the Serv-U installation directory, overwriting the existing files.
    2. Restart the Serv-U tray application. 
    3. Right-click the tray icon and select Start Serv-U. 

    The hotfix is installed.

    Result

    • The LIST command returns a proper files list.
    • The server is not vulnerable to unauthorized access.
    • The server does not crash.

          

    Uninstall the HotFix

     

    1. Shut down all running Serv-U processes. 

    Right-click the tray icon, and select Stop Serv-U. 
    Right-click the tray icon, and select Exit Tray.

    1. Locate the files backed up during the installation procedure above.
    2. Navigate to the Serv-U installation directory:

    For Windows, the default installation directory is:
    C:\Program Files\RhinoSoft\Serv-U
    or:
    C:\Program Files\RhinoSoft.com\Serv-U

    For Linux, the default installation directory is:
    /usr/local/Serv-U

    1. Copy the backed up to the Serv-U installation directory, overwriting the existing files.
    2. Restart the Serv-U tray application. 
    3. Right-click the tray icon, and select Start Serv-U. 

     
       The Hot Fix is uninstalled.


    For more information, contact Technical Support at
    https://www.serv-u.com/support

     

Last modified

Tags

Classifications

Public