IpSwitch WS_FTP Server SFTP server buffer overflow

Buffer overflow on oversized CWD...

IpSwitch WS_FTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================== IpSwitch WSFTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC ================================================================== IpSwitch WSFTPSERVER with SSH remote Buffer...

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

IpSwitch WSFTPSERVER with SSH remote Buffer Overflow Website:http://www.wsftp.com/products/wsftpserver/ Version:6.1.0.0 last one,others might be vuln too Bug: Remote Buffer Overflow CD 8e8.a78: Access violation - code c0000005 first chance First chance exceptions are reported before any exception...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

Ipswitch WS_FTP服务器远程脚本注入漏洞

WSFTP是一个Winsock协议下标准的FTP客户端工具。 WSFTP处理日志中可能出现的HTML代码时存在漏洞，远程攻击者可能利用此漏洞执行跨站脚本攻击。 WSFTP服务器记录客户端FTP命令时存在跨站脚本漏洞。如果客户端的FTP命令无效（error）的话，服务器就会将特殊的字符转换成HTML字符（ = , = ）并记录，但如果FTP命令有效的话就不会执行任何过滤检查，因此可能向日志文件中注入HTML和Javascript。WSFTP管理界面中有一个查看日志选项，在查看日志时就可以利用上述漏洞窃取管理员cookie，或直接创建FTP服务器的新用户帐号。 Ipswitch WSFTP...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Code injection

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

[Full-disclosure] IPSwitch WS_FTP Logging Server Remote Denial of Service -- a VDA Labs, LLC discovery

IPSwitch WSFTP Logging Server Remote Denial of Service ------------------------------------------------ Version: 7.5.29.0 Logsrv.exe Overview -------- The WS FTP logging server is a daemon that listens on UDP port 5151 and is shipped with WS FTP and by default is turned on and used by the local W...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

No description provided by source. / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow ...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

Ipswitch WSFTP 5.05 - Server Manager Local Site Buffer Overflow / Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is...

Ipswitch WS_FTP 5.05 Server Manager Local Site Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ====================================================================== Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow Exploit ====================================================================== / Ipswitch WSFTP 5.05 Server...

Ipswitch WS_FTP 5.05 - Server Manager Local Site Buffer Overflow

/ Ipswitch WSFTP 5.05 Server Manager Local Site Buffer Overflow There's a buffer overflow in iftpmgr.exe that can be triggered by registering a long site command. The result is then saved in the registry and every time the group is checked the bug appears. This exploit launches calc.exe. Tested...

IPSwitch WS-FTP 5.05 (XMD5) Remote Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ================================================================= IPSwitch WS-FTP 5.05 XMD5 Remote Buffer Overflow Exploit meta ================================================================= This file is part of the Metasploit Framework...

Ipswitch WS_FTP Server 5.05 - XMD5 Remote Buffer Overflow (Metasploit)

Ipswitch WSFTP Server 5.05 - XMD5 Remote Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

CVE-2007-0666

Ipswitch WSFTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the 1 iFTPAddU or 2 iFTPAddH file, or to a 3 edition module...

Format string

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...