ipswitch WS_FTP Server Directory Traversal Vulnerability

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. An attacker can use this vulnerability to write files and create directories outside of their authorized...

ipswitch WS_FTP Server Directory Traversal Vulnerability (CNVD-2019-24247)

ipswitch WSFTP Server is an FTP service program for Windows systems. A directory traversal vulnerability exists in SSHServerAPI.dll in ipswitch WSFTP Server versions prior to 2018 8.6.1. The vulnerability can be exploited by an attacker to obtain pathnames on the host operating system via the SCP...

Ipswitch WS_FTP Professional Buffer Overflow Vulnerability

Ipswitch WSFTP Professional is an FTP client for Microsoft Windows based operating systems. A buffer overflow vulnerability exists in the local search field and the backup locations field in versions of Ipswitch WSFTP Professional prior to 12.6.0.3. An attacker could use this vulnerability to...

IPSwitch FTP Log Server DoS

Few large packets to UDP/5151 port cause server to stop normal operations...

[Full-disclosure] Ipswitch FTP XSS leads to FTP server compromise

VDA Labs Advisory: -------------------------- Ipswitch FTP XSS leads to FTP server compromise. The Vendor has been notified, and given the PoC. Synopsis: ------------ There is XSS vulnerability when the WSFTP server logs client FTP commands. All user commands are logged. When the FTP command is...

PT-2004-2782 · Ipswitch · Ipswitch Ws Ftp Server

Name of the Vulnerable Software and Affected Versions: Ipswitch WS FTP Server version 4.0.2 Description: The issue involves multiple buffer overflows that allow remote authenticated users to execute arbitrary code. This can be achieved by causing a large error string to be generated by the ALLO...

PT-2002-1846 · Ipswitch · Ws Ftp Ftp Server

Name of the Vulnerable Software and Affected Versions: WS FTP FTP Server version 3.1.1 Description: The issue allows remote authenticated users to execute arbitrary code via a long SITE CPWD command, which is a buffer overflow. This can be exploited by sending a long command to the server,...