CVE-2004-1848

Ipswitch WS_FTP Server 4.0.2 is affected by a remote denial-of-service vulnerability involving a REST command with an oversized size argument, followed by a STOR of a smaller file, which can cause disk consumption and bypass file-size restrictions. The issue is documented under CVE-2004-1848; rel...

CVE-2004-1883

The CVE-2004-1883 issue affects Ipswitch WS_FTP Server 4.0.2. It describes two buffer-overflow routes: (1) via a large error string generated by the ALLO handler that could let remote authenticated users execute arbitrary code, and (2) via a long hostname or username inserted into a reply to a ST...

CVE-2004-1884: Undefined Security Weakness

Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...

CVE-2004-1885: Undefined Security Weakness

Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...

CVE-2004-1848: Undefined Security Weakness

Ipswitch WSFTP Server 4.0.2 allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file...

CVE-2004-1883: Undefined Security Weakness

Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...

CVE-2004-1643

CVE-2004-1643 affects WS_FTP Server (WS_FTP Server 5.0.2). The vulnerability allows remote authenticated users to cause a denial of service by issuing a CD command with an invalid path containing a "../" sequence, leading to CPU consumption. Public sources consistently describe remote DoS due to ...

CVE-2004-1643

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2004-1643: Undefined Security Weakness

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2004-1135

Multiple buffer overflows in WSFTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service service crash via long 1 SITE, 2 XMKD, 3 MKD, and 4 RNFR commands...

CVE-2004-1883

Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...

CVE-2004-1885

Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...

CVE-2004-1848

Ipswitch WSFTP Server 4.0.2 allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file...

CVE-2004-1135

CVE-2004-1135 affects Ipswitch WS_FTP Server 5.03. A buffer overflow in the MKD (and related) FTP commands can crash the service (DoS) and, per advisories, may allow code execution with SYSTEM privileges. Exploit activity is documented (Metasploit module for WS_FTP 5.03 MKD overflow; MITRE CVE en...

CVE-2004-1135

Multiple buffer overflows in WSFTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service service crash via long 1 SITE, 2 XMKD, 3 MKD, and 4 RNFR commands...

CVE-2004-1135: Undefined Security Weakness

Multiple buffer overflows in WSFTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service service crash via long 1 SITE, 2 XMKD, 3 MKD, and 4 RNFR commands...

WS_FTP Server < 5.04 Multiple Vulnerabilities (2)

Binary data 2436.prm...

WS_FTP Server buffer overflow adn backdor

Buffer overflow in STAT and another commands. Built-in user accaount XXSESSMGRYY with password X1833 allows command execution on server...

Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14.

Summary: Multiple buffer overflows exists in WSFTP Server Version 5.03, 2004.10.14 http://www.ipswitch.com/. Details: Multiple buffer overflows exist in WSFTP Server Version 5.03, 2004.10.14. There are four vulnerable commands that can be used to cause these buffer overflows. Three of the...

WS_FTP Server Multiple Command Remote Overflow DoS

According to its version number, the remote WSFTP server is vulnerable to multiple buffer overflows which may be used by an attacker to execute arbitrary code on the remote system. C Tenable Network Security include"compat.inc"; ifdescription scriptid15857; scriptbugtraqid11772;...