Format string

Format string vulnerability in the SCP module in Ipswitch WSFTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WSFTP script command...

CVE-2007-0665

CVE-2007-0665 affects Ipswitch WS_FTP 2007 Professional’s SCP module. The vulnerability is a format string flaw in the handling of filenames, related to the SHELL WS_FTP script command, which could allow remote attackers to execute arbitrary commands. The NVD entry lists a CVSSv2 base score of 6....

Ipswitch WS_FTP 2007 SCP处理格式串漏洞

Ipswitch WSFTP是一款FTP服务程序。 Ipswitch WSFTP包含的SCP模块存在格式串问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 打开特殊构建的SCP文件，WSFTP 2007脚本会导致格式串错误。特殊构建文件使用WSFTP脚本命令"SHELL"和执行特殊文件名。文件使用"file://"访问。 Ipswitch WS FTP Server Professional 2007 目前没有解决方案提供,请关注以下链接： http://www.ipswitch.com/products/wsftp/home/index.asp...