CVE-2006-5000

Ipswitch WS_FTP Server is affected: versions 5.0 through 5.05 before Hotfix 1 contain buffer overflows in the parsing of long arguments to XCRC, XMD5, and XSHA1 commands, leading to a stack overflow. The ZDI advisory notes remote code execution possible with valid or anonymous credentials; vendor...

CVE-2006-5001

WS_FTP Server (Ipswitch) • Vulnerable: versions prior to 5.05 Hotfix 1. The log analyzer fails to display certain sensitive information in the Files and Summary tabs. Root cause details are not provided in the connected docs. Remediation: apply 5.05 Hotfix 1 to resolve the issue.

CVE-2006-5001: Undefined Security Weakness

Unspecified vulnerability in the log analyzer in WSFTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the 1 Files and 2 Summary tabs. NOTE: in the early publication of this identifier on 20060926, the descriptio...

Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch WSFTP Server. Anonymous access or authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during the parsing of long string...

CVE-2006-5000: Undefined Security Weakness

Multiple buffer overflows in WSFTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the 1 XCRC, 2 XMD5, and 3 XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was use...

CVE-2006-4974

Buffer overflow in Ipswitch WSFTP Limited Edition LE 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

CVE-2006-4974

Buffer overflow in Ipswitch WSFTP Limited Edition LE 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

CVE-2006-4974

CVE-2006-4974 affects Ipswitch WS_FTP Limited Edition 5.08. A buffer overflow in the FTP server’s handling of PASV responses allows a remote attacker to execute arbitrary code. The advisory states remote code execution is possible via a long PASV reply, signaling a high-severity, network-exposed ...

CVE-2006-4974: Undefined Security Weakness

Buffer overflow in Ipswitch WSFTP Limited Edition LE 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

WS_FTP XCRC buffer overflow

Added: 09/22/2006 CVE: CVE-2006-4847 BID: 20076 OSVDB: 28939 Background WSFTP Server is an FTP server for Windows platforms. Problem Buffer overflows in multiple FTP commands allow an authenticated attacker to execute arbitrary commands. Resolution Upgrade to WSFTP Server 5.05 Hotfix 1. Reference...

WS_FTP XCRC buffer overflow

Added: 09/22/2006 CVE: CVE-2006-4847 BID: 20076 OSVDB: 28939 Background WSFTP Server is an FTP server for Windows platforms. Problem Buffer overflows in multiple FTP commands allow an authenticated attacker to execute arbitrary commands. Resolution Upgrade to WSFTP Server 5.05 Hotfix 1. Reference...

WS_FTP XCRC buffer overflow

Added: 09/22/2006 CVE: CVE-2006-4847 BID: 20076 OSVDB: 28939 Background WSFTP Server is an FTP server for Windows platforms. Problem Buffer overflows in multiple FTP commands allow an authenticated attacker to execute arbitrary commands. Resolution Upgrade to WSFTP Server 5.05 Hotfix 1. Reference...

WS_FTP XCRC buffer overflow

Added: 09/22/2006 CVE: CVE-2006-4847 BID: 20076 OSVDB: 28939 Background WSFTP Server is an FTP server for Windows platforms. Problem Buffer overflows in multiple FTP commands allow an authenticated attacker to execute arbitrary commands. Resolution Upgrade to WSFTP Server 5.05 Hotfix 1. Reference...

WS_FTP FTP client buffer overflow

Buffer overflow on PASV command response parsing...

WS_FTP LE 5.08 (PASV response) Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ============================================================= WSFTP LE 5.08 PASV response Remote Buffer Overflow Exploit ============================================================= / wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflo...

Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow

/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...

CVE-2006-4847

Multiple buffer overflows in Ipswitch WSFTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long 1 XCRC, 2 XSHA1, or 3 XMD5 commands...

CVE-2006-4847

Ipswitch WS_FTP Server 5.05 has buffer overflows in the FTP commands XCRC, XSHA1 and XMD5 that can be exploited by an authenticated remote user to execute arbitrary code or cause a denial of service. Public exploit code exists (e.g., Metasploit modules for 5.05 XMD5/XCRC) and the recommended reme...

CVE-2006-4847

Multiple buffer overflows in Ipswitch WSFTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long 1 XCRC, 2 XSHA1, or 3 XMD5 commands...

CVE-2006-4847: Undefined Security Weakness

Multiple buffer overflows in Ipswitch WSFTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long 1 XCRC, 2 XSHA1, or 3 XMD5 commands...