Ipswitch WS_FTP Server 6 - '/WSFTPSVR/FTPLogServer/LogViewer.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/27654/info WSFTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain unauthorized access to the affected application and gain access to potentially...

wsftp-disclose.txt

Luigi Auriemma Application: WSFTP Server Manager http://www.wsftp.com Versions: WSFTP Server = 6.1.0.0 Platforms: Windows Bugs: A authorization bypassing in log visualization B ASP source visualization Exploitation: remote Date: 06 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Socket termination in FTP Log Server 7.9.14.0

Luigi Auriemma Application: FTP Log Server http://www.wsftp.com Versions: = 7.9.14.0 Platforms: Windows Bug: socket termination Exploitation: remote Date: 04 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix =============== 1...

CVE-2008-0590

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

Buffer overflow

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

CVE-2008-0590

Buffer overflow in Ipswitch WSFTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long opendir command...

CVE-2008-0590

CVE-2008-0590 — Ipswitch WS_FTP Server with SSH 6.1.0.0 is affected by a buffer overflow triggered by a long opendir command. The vulnerability allows remote authenticated users to crash the service and potentially execute arbitrary code. Affected versions are WS_FTP Server prior to 6.1.1 (per Ne...

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

IpSwitch WSFTPSERVER with SSH remote Buffer Overflow Website:http://www.wsftp.com/products/wsftpserver/ Version:6.1.0.0 last one,others might be vuln too Bug: Remote Buffer Overflow CD 8e8.a78: Access violation - code c0000005 first chance First chance exceptions are reported before any exception...

IpSwitch WS_FTP Server SFTP server buffer overflow

Buffer overflow on oversized CWD...

Ipswitch WS_FTP Server with SSH 6.1.0.0 - Remote Buffer Overflow (PoC)

Ipswitch WSFTP Server with SSH 6.1.0.0 - Remote Buffer Overflow PoC IpSwitch WSFTPSERVER with SSH remote Buffer Overflow Website:http://www.wsftp.com/products/wsftpserver/ Version:6.1.0.0 last one,others might be vuln too Bug: Remote Buffer Overflow CD 8e8.a78: Access violation - code c0000005...

IpSwitch WS_FTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ================================================================== IpSwitch WSFTP Server with SSH 6.1.0.0 Remote Buffer Overflow PoC ================================================================== IpSwitch WSFTPSERVER with SSH remote Buffer...

IPSwitch WS_FTP crossite scripting

Crossite scripting with log file entries in Web interface...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Cross site scripting

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

Ipswitch WS_FTP服务器远程脚本注入漏洞

WSFTP是一个Winsock协议下标准的FTP客户端工具。 WSFTP处理日志中可能出现的HTML代码时存在漏洞，远程攻击者可能利用此漏洞执行跨站脚本攻击。 WSFTP服务器记录客户端FTP命令时存在跨站脚本漏洞。如果客户端的FTP命令无效（error）的话，服务器就会将特殊的字符转换成HTML字符（ = , = ）并记录，但如果FTP命令有效的话就不会执行任何过滤检查，因此可能向日志文件中注入HTML和Javascript。WSFTP管理界面中有一个查看日志选项，在查看日志时就可以利用上述漏洞窃取管理员cookie，或直接创建FTP服务器的新用户帐号。 Ipswitch WSFTP...

CVE-2007-4555

CVE-2007-4555 describes a cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP's administration interface. The issue occurs when arguments to a valid command are not properly sanitized and are displayed by the view log option, enabling an attacker to inject arbitrary web script or HTML. Th...

CVE-2007-4555

Cross-site scripting XSS vulnerability in Ipswitch WSFTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can be leveraged to creat...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

Code injection

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...

CVE-2007-3823

The Logging Server Logsrv.exe in IPSwitch WSFTP 7.5.29.0 allows remote attackers to cause a denial of service daemon crash by sending a crafted packet containing a long string to port 5151/udp...