163 matches found
CVE-2006-4974
CVE-2006-4974 affects Ipswitch WS_FTP Limited Edition 5.08. A buffer overflow in the FTP server’s handling of PASV responses allows a remote attacker to execute arbitrary code. The advisory states remote code execution is possible via a long PASV reply, signaling a high-severity, network-exposed ...
Ipswitch WS_FTP LE 5.08 - PASV Response Remote Buffer Overflow
/ wsexp.c WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 Tested on XP SP2 Polish, 2000 SP4 Polish Example: C:\wsexp 1 192.168.0.1 4444 WSFTP LE 5.08 PASV response 0day buffer overflow exploit Coded by h07 + Listening on 21 + Connection accepted from 192.168.0.3 + Client...
CVE-2006-4847
Ipswitch WS_FTP Server 5.05 has buffer overflows in the FTP commands XCRC, XSHA1 and XMD5 that can be exploited by an authenticated remote user to execute arbitrary code or cause a denial of service. Public exploit code exists (e.g., Metasploit modules for 5.05 XMD5/XCRC) and the recommended reme...
CVE-2004-1885
Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...
CVE-2004-1848
Ipswitch WSFTP Server 4.0.2 allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file...
CVE-2004-1883
Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...
CVE-2004-1883
The CVE-2004-1883 issue affects Ipswitch WS_FTP Server 4.0.2. It describes two buffer-overflow routes: (1) via a large error string generated by the ALLO handler that could let remote authenticated users execute arbitrary code, and (2) via a long hostname or username inserted into a reply to a ST...
CVE-2004-1883
Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...
CVE-2004-1885
Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...
CVE-2004-1848
Ipswitch WSFTP Server 4.0.2 allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file...
Ipswitch WS_FTP Server 5.03 - 'RNFR' Buffer Overflow
===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ""; if $socket = IO::Socket::INET-newPeerAddr = $ARGV0, PeerPort = "21", Proto = "TCP"...
Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow
Ipswitch WSFTP Server 5.03 - MKD Remote Buffer Overflow / no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if...
Ipswitch WS_FTP Server 5.03 - MKD Remote Buffer Overflow
/ no@0x00:/Exploits/IPS-WSFTP$ ./IPSWSFTP-exploit 10.20.30.2 test test Ipswitch WSFTP Remote buffer overflow exploit by NoPh0BiA. x Connected to: 10.20.30.2 on port 21. x Sending Login..done. x Sending bad code..done. x Checking if exploitation was successful.. x Connected to: 10.20.30.2 on port...
How to crash a harddisk - the Ipswitch WS_FTP Server way
Advisory Name: How to crash a harddisk - the Ipswitch WSFTP Server way Impact : Denial of Service Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description It's possible for any user with write access to a directory, even when there's a limit to how...
CVE-2004-1884
Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...
Ipswitch WS_FTP Server 4.0.2 - ALLO Remote Buffer Overflow
Ipswitch WSFTP Server 4.0.2 - ALLO Remote Buffer Overflow / Ipswitch WSFTP Server pragma commentlib, "ws232.lib" include include include include const char tempfile = "ttt"; define ALLOSTRING "ALLO 18446744073709551615" / Assume all addresses = this address to be invalid addresses. If the exploit...
Ipswitch WS_FTP Server 4.0.2 - ALLO Remote Buffer Overflow
/ Ipswitch WSFTP Server pragma commentlib, "ws232.lib" include include include include const char tempfile = "ttt"; define ALLOSTRING "ALLO 18446744073709551615" / Assume all addresses = this address to be invalid addresses. If the exploit doesn't work, try changing it to a larger value, eg...
IPswitch WS_FTP buffer overflows
Buffer overflow on oversized filename then building local files list. Buffer overflow on oversized server banner...
Ipswitch WS_FTP Server 3.44.0 - FTP Command Buffer Overrun
Ipswitch WSFTP Server 3.44.0 - FTP Command Buffer Overrun // source: https://www.securityfocus.com/bid/8542/info Ipswitch WSFTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. An FTP user who supplies excessive input to these comman...