Ipswitch WS_FTP 12 Professional Format String

!/usr/bin/perl nocoolnameforawsftppoc.pl AKA Ipswitch WSFTP 12 Professional Remote Format String 0day PoC Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.07.2009 I really hate releasing proof of concepts. ASCII gets itchy after a few months. And it has been over a yea...

Progress WS_FTP Server Version Detection (credentialed check)

Progress WSFTP Server formerly known as Ipswitch WSFTP Server, a commercial FTP server for Windows, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40770; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate",...

Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities (uncredentialed check)

According to its banner, the remote host is running a version of WSFTP earlier than 6.1.1. Such versions are reportedly affected by multiple vulnerabilities : - Improper handling of UDP packets within the FTP log server may allow an attacker to crash the affected service. CVE-2008-0608 - There is...

Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities

The remote host is running a version of WSFTP earlier than 6.1.1. Such versions are reportedly affected by multiple vulnerabilities : - Improper handling of UDP packets within the FTP log server may allow an attacker to crash the affected service. CVE-2008-0608 - There is a buffer overflow...

WS_FTP Version Detection

This script determines the WsFtp server version on the remote host and sets the result in the KB. OpenVAS Vulnerability Test $Id: secpodwsftpwindetect.nasl 5148 2017-01-31 13:16:55Z teissa $ WSFTP Server Checking Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.com This...

Progress WS_FTP Server Detection (FTP)

FTP based detection of Progress WSFTP Server. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WS_FTP Server Manager Security Bypass Vulnerability

This host is installed with WSFTP Server and is prone to Security Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodwsftpserversecbypassvuln.nasl 5657 2017-03-21 11:08:08Z cfi $ WSFTP Server Manager Security Bypass Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2008 SecPod,...

WS_FTP Server <= 6.1.0.0 Security Bypass Vulnerability

WSFTP Server is prone to a security bypass vulnerability. Copyright C 2008 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

Design/Logic Flaw

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

CVE-2008-5692

Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...

CVE-2008-5693

Ipswitch WSFTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character...

CVE-2008-5693

CVE-2008-5693 affects Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier (and possibly other Ipswitch products). The vulnerability permits remote attackers to read contents of custom ASP files in WSFTPSVR/ by issuing a request with an appended dot. Documents show an impact to confidentiality (par...

CVE-2008-5692

Ipswitch WS_FTP Server Manager before 6.1.1 (and possibly other Ipswitch products) contains an authentication-bypass vulnerability that lets remote attackers read logs by abusing the sequence: call FTPLogServer/login.asp (logLogout action) and then request FTPLogServer/LogViewer.asp using the loc...

CVE-2008-5692

Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...

Buffer overflow

Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...

CVE-2008-3795

Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...

CVE-2008-3795

Buffer overflow in Ipswitch WSFTP Home client allows remote FTP servers to have an unknown impact via a long "message response."...

CVE-2008-3795

CVE-2008-3795 is a buffer overflow affecting the Ipswitch WS_FTP Home client, triggered by a long message response sent by a remote FTP server. The vulnerability's description indicates an unknown impact but classifies CVSS as high (AV:N/AC:L/Au:N/C:C/I:C/A:C). The core issue is a buffer overflow...

Format string

Format string vulnerability in Ipswitch WSFTP Home 2007.0.0.2 and WSFTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in a connection greeting response...