CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-4555: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

Code injection

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823: Undefined Security Weakness

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

No description provided by source. / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow ...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================================== Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow Exploit ====================================================================== / Ipswitch WSFTP 5.05 Server...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

Ipswitch WSFTP 5.05 - Server Manager Local Site Buffer Overflow / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is...

IPSwitch WS-FTP 5.05 (XMD5) Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================= IPSwitch WS-FTP 5.05 XMD5 Remote Buffer Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework...

Ipswitch WS_FTP Server 5.05 - XMD5 Remote Buffer Overflow (Metasploit)

Ipswitch WSFTP Server 5.05 - XMD5 Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Format string

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...

CVE-2007-0665

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...

Input validation

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

CVE-2007-0666

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

CVE-2007-0666

IPSwith WS_FTP Server 5.04 is affected by CVE-2007-0666. A long input string to the iFTPAddU or iFTPAddH file, or to an edition module, triggers arbitrary code execution on the server due to improper input handling. The connected sources identify the affected component and the root cause (input h...

CVE-2007-0665

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...

CVE-2007-0665

CVE-2007-0665 affects Ipswitch WS_FTP 2007 Professional’s SCP module. The vulnerability is a format string flaw in the handling of filenames, related to the SHELL WS_FTP script command, which could allow remote attackers to execute arbitrary commands. The NVD entry lists a CVSSv2 base score of 6....