Ipswitch WS_FTP Professional HTTP服务器应答格式串漏洞

Bugraq ID: 36297 Ipswitch WSFTP Professional是一款流行的FTP客户端软件。 Ipswitch WSFTP Professional不正确处理来自HTTP服务器的应答，构建包含格式串的状态代码，可导致触发典型的格式串错误，可使应用程序崩溃。 Ipswitch WSFTP Professional 12 厂商解决方案： 目前没有解决方案提供： http://www.ipswitchft.com/products/wsftpprofessional/ !/usr/bin/perl nocoolnameforawsftppoc.pl AKA...

Ipswitch WS_FTP 12 Professional Format String

!/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few months. And it has been over a yea...