Exploit for CVE-2019-12181

kitploit · 2026-08-27

Description

LPE in Serv-U FTP 15.1.6 enables local privilege escalation.

Entry point

Parameter-prepareinstallation · path

Path/usr/local/Serv-U/Serv-U

Local privilege escalation via Serv-U by invoking the setuid root binary with -prepareinstallation that leads to command execution through ARGV[0]

Affected software

Solarwinds Serv-u Ftp Server< 15.1.7

Solarwinds Serv-u Mft Server< 15.1.7

All known vulnerabilities by product

CVSS 8.8 for CVE-2019-12181

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-27 13:41

Last Seen:2026-08-27 20:03

Reporter:KitPloit

Tags

Serv-U FTPlocal privilege escalationFTP serviceversion 15.1.6

Other exploits for CVE-2019-12181

2026-08-27 KitPloitKITPLOIT

Exploit for CVE-2002-0526

2026-03-12 buildcoveGITHUB

Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (2) Exploit

2019-07-26 bcolesZDTBash

Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit)

2019-07-03 MetasploitEXPLOITDBRuby

Serv-U FTP Server 15.1.7 prepareinstallation Privilege Escalation Exploit

2019-07-02 metasploitZDTRuby

Serv-U FTP Server prepareinstallation Privilege Escalation

2019-07-02 Brendan ColesPACKETSTORMRuby

Serv-U FTP Server < 15.1.7 - Local Privilege Escalation Exploit

2019-06-18 Guy LevinZDTC

Serv-U FTP Server 15.1.7 - Local Privilege Escalation (1)

2019-06-18 Guy LevinEXPLOITPACKC

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-MAVLEVIN-CVE-2019-12181
# CVE-2019-12181

Эксплойт LPE для CVE-2019-12181 (Serv-U FTP 15.1.6)