The first is the SERV-U site chmod vulnerability and Serv-u mdtm vulnerability, that is, using an account can easily get system permissions. The second is the local overflow vulnerability of Serv-U, that is, Serv-U has a default Management User (username: localadministrator, password: #@$ AK #. k; 0 @ P). Anyone can add or delete accounts and execute any internal or external commands by using an account that can access the local port 43958.
At this time, people began to pay attention to the security of SERV-U, and take some related measures, such as modifying the SERV-U Management port, account and password. However, the modified content is retained in the servudaemon.exe file. Therefore, after downloading it, you can easily obtain the modified port, account, and password using a hexadecimal editing software such as ultraedit.
From the SERV-U6.0.0.2, the software has a login password function, so that if you add a management password, and set more properly, the SERV-U will be more secure than the original. Now let's get started with the SERV-U setup tour, using version is SERV-U 6.0.0.2.
The old saying has cloud, thousands of feet of the station began with the ground, set the security of the SERV-U from the installation began. This article ArticleThe main is to write the security settings of the SERV-U, so do not spend too much effort to introduce the installation, just to mention the key points.
SERV-U is installed in the c: \ Program Files \ Serv-U directory by default, we 'd better make a change. For example, change to the path D: \ u89327850mx8utu432x $ uy32x211942590co7v23x1t3 (figure 1). If the installation drive letter Web user cannot browse, it is difficult for him to guess the installation path. After installation, a shortcut will be generated on the desktop and the Start menu. We recommend that you delete the shortcut because it is generally not used. Maybe you have to ask, how should you enter the SERV-U settings interface? In fact, it is very simple, double-click the tray monitor icon in the right corner of the taskbar to start the SERV-U management interface.
Figure 1: Modify the installed directory
