CVE-2019-12181

A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

• CWE-78

• http://packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.htmlBroken Link
• https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-1-7_release_notes.htmRelease Notes, Vendor Advisory
• https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-Potential-elevation-of-privileges-on-Linux-systemsVendor Advisory
• http://packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.htmlBroken Link
• https://documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-1-7_release_notes.htmRelease Notes, Vendor Advisory
• https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-Potential-elevation-of-privileges-on-Linux-systemsVendor Advisory

Published

Jun 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12174hide.me before 2.4.4 on macOS suffers from a privilege escal…
• CVE-2019-12175In Zeek Network Security Monitor (formerly known as Bro) bef…
• CVE-2019-12176Privilege escalation in the "HTC Account Service" and "Vivep…
• CVE-2019-12177Privilege escalation due to insecure directory permissions a…
• CVE-2019-1218A spoofing vulnerability exists in the way Microsoft Outlook…
• CVE-2019-12180An issue was discovered in SmartBear ReadyAPI through 2.8.2 …7.8
• CVE-2019-12182Directory Traversal in Safescan Timemoto and TA-8000 series …9.8
• CVE-2019-12183Incorrect Access Control in Safescan Timemoto TM-616 and TA-…7.5
• CVE-2019-12184There is XSS in browser/components/MarkdownPreview.js in Boo…
• CVE-2019-12185eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via th…
• CVE-2019-12186An issue was discovered in Sylius products. Missing input sa…4.8
• CVE-2019-12189An issue was discovered in Zoho ManageEngine ServiceDesk Plu…