IpSwitch WS_FTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================== IpSwitch WSFTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC ================================================================== IpSwitch WSFTPSERVER with SSH remote Buffer...

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

IpSwitch WSFTPSERVER with SSH remote Buffer Overflow Website:http://www.wsftp.com/products/wsftpserver/ Version:6.1.0.0 last one,others might be vuln too Bug: Remote Buffer Overflow CD 8e8.a78: Access violation - code c0000005 first chance First chance exceptions are reported before any exception...

IPSwitch WS_FTP crossite scripting

Crossite scripting with log file entries in Web interface...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Ipswitch WS_FTP服务器远程脚本注入漏洞

WSFTP是一个Winsock协议下标准的FTP客户端工具。 WSFTP处理日志中可能出现的HTML代码时存在漏洞，远程攻击者可能利用此漏洞执行跨站脚本攻击。 WSFTP服务器记录客户端FTP命令时存在跨站脚本漏洞。如果客户端的FTP命令无效（error）的话，服务器就会将特殊的字符转换成HTML字符（ = , = ）并记录，但如果FTP命令有效的话就不会执行任何过滤检查，因此可能向日志文件中注入HTML和Javascript。WSFTP管理界面中有一个查看日志选项，在查看日志时就可以利用上述漏洞窃取管理员cookie，或直接创建FTP服务器的新用户帐号。 Ipswitch WSFTP...

CVE-2007-4555: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Code injection

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The CVE-2007-3823 issue affects IPSwitch WS_FTP Logging Server (Logsrv.exe) in WS_FTP 7.5.29.0. A crafted UDP packet to port 5151/udp containing a long string can cause the daemon to crash, enabling remote denial of service. Exploitation is reported as remote and unauthenticated. The provided doc...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823: Undefined Security Weakness

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

IPSwitch WS_FTP logging daemon DoS

Denial of service UDP/515 on network packet parsing...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

Design/Logic Flaw

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...

CVE-2007-2213

CVE-2007-2213 affects Ipswitch WS FTP 2007 (WS_FTP Home/Professional 2007). The vulnerability is in the Initialize function of NetscapeFTPHandler, causing a denial of service (NULL dereference and application crash) via unspecified vectors related to “improper arguments.” Exploitation status is n...

CVE-2007-2213

Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WSFTP Home and Professional 2007 allows remote attackers to cause a denial of service NULL dereference and application crash via unspecified vectors related to "improper arguments."...