ZDI-06-029: Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities

ZDI-06-029: Ipswitch WSFTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-06-029.html September 26, 2006 -- CVE ID: CVE-2006-5000 -- Affected Vendor: Ipswitch -- Affected Products: Ipswitch WSFTP Server v5.04, v5.05 -- TippingPointT...

Immunity Canvas: WS_FTPD_XCRC

Name| wsftpdxcrc ---|--- CVE| CVE-2006-5000 Exploit Pack| CANVAS Description| Ipswitch WSFTP Server XCRC Overflow Notes| CVE Name: CVE-2006-5000 VENDOR: IPSwitch Repeatability: One shot References: http://www.zerodayinitiative.com/advisories/ZDI-06-029.html CVE Url:...

CVE-2006-5000

Ipswitch WS_FTP Server is affected: versions 5.0 through 5.05 before Hotfix 1 contain buffer overflows in the parsing of long arguments to XCRC, XMD5, and XSHA1 commands, leading to a stack overflow. The ZDI advisory notes remote code execution possible with valid or anonymous credentials; vendor...