WS_FTP XCRC/XSHA1/XMD5 overflow analysis-vulnerability warning-the black bar safety net

Starter to: After testing found that, if only WSFTP 5.05 above only supports XCRC/XSHA1/XMD5 these commands, this vulnerability is relatively simple, directly send the XCRC long string can be triggered. 以 iFtpSvc.exe 5.05 as an example: . text:0041E5CF loc41E5CF: ; CODE XREF: sub41DB09+AB7j...

IpSwitch WS_FTP Server buffer overflow

Buffer overflow in XCRC, XSHA1, XMD5, Checksum FTP commands...

Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch WSFTP Server. Anonymous access or authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during the parsing of long string...

CVE-2006-5000: Undefined Security Weakness

Multiple buffer overflows in WSFTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the 1 XCRC, 2 XMD5, and 3 XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was use...

CVE-2006-4847: Undefined Security Weakness

Multiple buffer overflows in Ipswitch WSFTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long 1 XCRC, 2 XSHA1, or 3 XMD5 commands...