IPSwitch WS_FTP Server Manager / Whats Up unauthorized access

It's possible to access script files with localhostnull account without password. Scripts source code leak...

Logs visualization in WS_FTP Server Manager 6.1.0.0

Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files. Attackers can exploit...

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities

Ipswitch Instant Messaging 2.0.8.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27677/info Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows...

Re: Logs visualization in WS_FTP Server Manager 6.1.0.0

Luigi Auriemma wrote: WSFTP Server Manager aka WSFTP WebService is the web administration interface of the IpSwitch WSFTP server and runs by default on port 80. This also affects the Ipswitch What's Up Gold 11.03 web server...

Design/Logic Flaw

The Logging Server ftplogsrv.exe 7.9.14.0 and earlier in IPSwitch WSFTP 6.1 allows remote attackers to cause a denial of service loss of responsiveness via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorde...

CVE-2008-0608

The Logging Server ftplogsrv.exe 7.9.14.0 and earlier in IPSwitch WSFTP 6.1 allows remote attackers to cause a denial of service loss of responsiveness via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorde...

CVE-2008-0608

The CVE-2008-0608 entry concerns IPSwitch WS_FTP Logging Server (ftplogsrv.exe) version 6.1 and earlier. Affected component: the Logging Server process handling UDP traffic on port 5151/udp. Root cause: processing a large number of large UDP packets can cause the listening socket to terminate, le...

CVE-2008-0608

The Logging Server ftplogsrv.exe 7.9.14.0 and earlier in IPSwitch WSFTP 6.1 allows remote attackers to cause a denial of service loss of responsiveness via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorde...

CVE-2008-0608: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Logging Server ftplogsrv.exe 7.9.14.0 and earlier in IPSwitch WSFTP 6.1 allows remote attackers to cause a denial of service loss of responsiveness via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorde...

wsftp-disclose.txt

Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Socket termination in FTP Log Server 7.9.14.0

Luigi Auriemma Application: FTP Log Server http://www.wsftp.com Versions: = 7.9.14.0 Platforms: Windows Bug: socket termination Exploitation: remote Date: 04 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...

Ipswitch WS_FTP Server 6 - '/WSFTPSVR/FTPLogServer/LogViewer.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/27654/info WSFTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain unauthorized access to the affected application and gain access to potentially...

Ipswitch WS_FTP Server 6 - WSFTPSVRFTPLogServerLogViewer.asp Authentication Bypass

Ipswitch WSFTP Server 6 - WSFTPSVRFTPLogServerLogViewer.asp Authentication Bypass source: https://www.securityfocus.com/bid/27654/info WSFTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain...

IPSwitch FTP Log Server DoS

Few large packets to UDP/5151 port cause server to stop normal operations...

Buffer overflow

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

CVE-2008-0590

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

CVE-2008-0590

CVE-2008-0590 — Ipswitch WS_FTP Server with SSH 6.1.0.0 is affected by a buffer overflow triggered by a long opendir command. The vulnerability allows remote authenticated users to crash the service and potentially execute arbitrary code. Affected versions are WS_FTP Server prior to 6.1.1 (per Ne...

CVE-2008-0590

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

CVE-2008-0590: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...