IPSwitch WS_FTP ftp bounce attack

No description provided...

WS_FTP Server SITE CPWD Command Remote Overflow

This host is running a version of WSFTP FTP server prior to 3.1.2. Versions earlier than 3.1.2 contain an unchecked buffer in routines that handle the 'CPWD' command arguments. The 'CPWD' command allows remote users to change their password. By issuing a malformed argument to the CPWD command, a...

CVE-2002-0826

Buffer overflow in WSFTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command...

CVE-2001-1021

Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...

CVE-2001-1021

WS_FTP Server (Ipswitch) before version 2.0.3 is affected by a buffer overflow vulnerability (CVE-2001-1021) that can be triggered by long arguments to multiple FTP commands (DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, XRMD). The connected OpenVAS/Nessus entries corroborate a remote...

WS-FTP Server vulnerable to buffer overflow via long string sent as argument to ftp command

Overview A remotely exploitable buffer overflow exists in the IPSWITCH WSFTP Server. Description Defcom Labs has discovered a remotely exploitable buffer overflow vulnerability in the IPSWITCH WSFTP Server on all platforms that allows intruders to execute arbitrary code with the privileges of the...

def-2001-31

====================================================================== Defcom Labs Advisory def-2001-31 WSFTP server 2.0.3 Buffer Overflow Author: Andreas Junestam [email protected] Co-Author: Janne Sarendal [email protected] Release Date: 2001-10-05...

Ipswitch WS_FTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow

Ipswitch WSFTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP...

Ipswitch WS_FTP Server 1.0.x/2.0.x - 'STAT' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP Server by default runs as a SYSTEM service. If a logged in use...

CVE-1999-1078

WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...

CVE-1999-1171

IPswitch WSFTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...

CVE-1999-1171

IPswitch WS_FTP contains a local privilege escalation flaw: by setting the flags registry key to 1920, a local user can gain additional privileges and modify or add mail accounts. The PT-1999-1600 entry confirms this issue but does not specify affected versions, and the original CVE description m...

CVE-1999-1078

The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...

CVE-2001-1021

Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...

Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows

Ipswitch WSFTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows source: https://www.securityfocus.com/bid/3102/info WS-FTP Server is vulnerable to malicious remote user input argumenting multiple FTP commands received from anonymously connecting clients. An attacker may supply a long...

DST2K0009.txt

================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 31/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...

CVE-1999-0362

The CVE is for WS_FTP Server DoS via the CWD command. Affected software is WS_FTP Server; vulnerability arises when a CWD command with a long argument crashes the service, leading to a denial of service (availability impact). Public references describe this as a remote DoS issue with the CWD hand...

CVE-1999-0362

WSFTP server remote denial of service through cwd command...

CVE-1999-1078

WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...

Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application...