[SA21932] WS_FTP Server FTP Commands Buffer Overflow Vulnerability

TITLE: WSFTP Server FTP Commands Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA21932 VERIFY ADVISORY: http://secunia.com/advisories/21932/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: WSFTP Server 5.x http://secunia.com/product/3853/ DESCRIPTION: A...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...

WS_FTP MKD command buffer overflow

Added: 03/10/2006 CVE: CVE-2004-1135 BID: 11772 OSVDB: 12509 Background WSFTP Server is an FTP server for Windows platforms. Problem A buffer overflow vulnerability in the MKD command could allow an attacker to execute commands on the server. If the anonymous FTP account is enabled, the attacker...

WS_FTP SITE CPWD Buffer Overflow

This host is running a version of WSFTP FTP server prior to 3.1.2. Versions earlier than 3.1.2 contain an unchecked buffer in routines that handle the 'CPWD' command arguments. The 'CPWD' command allows remote users to change their password. By issuing a malformed argument to the CPWD command, a...

WS_FTP client weak stored password

The remote host has a version of the WSFTP client which use a weak encryption method to store site password. OpenVAS Vulnerability Test $Id: wsftpclientweakstoredpass.nasl 6040 2017-04-27 09:02:38Z teissa $ Description: WSFTP client weak stored password Authors: David Maciejak based on work from ...

WS_FTP Server < 3.1.2 Buffer Overflow Vulnerability

WSFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2002 Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WS_FTP Server STAT Buffer Overflow Vulnerability (Nov 2005)

WSFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver"...

WS_FTP Server Buffer Overflow Vulnerability (Nov 2005)

WSFTP Server is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:wsftpserver";...

CVE-2002-1851

Buffer overflow in WSFTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors...

EUVD-2002-1830

Buffer overflow in WSFTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors...

CVE-2002-1851

Technical details (affected components, exact exploit vectors, and remediation) are not publicly provided in the connected documents. Monitor updates from Red Hat, CVE listings, and vendor advisories for confirmed information.

CVE-2004-1884

CVE-2004-1884 affects Ipswitch WS_FTP Server 4.0.2. The vulnerability is a backdoor: the XXSESS_MGRYY user with a default password can enable remote access, enabling partial confidentiality/integrity/availability impact as indicated by CVSS base vector AV:N/AC:L/Au:N/C:P/I:P/A:P. Public reference...

CVE-2004-1885

Ipswitch WSFTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe...

CVE-2004-1848

Ipswitch WSFTP Server 4.0.2 allows remote attackers to cause a denial of service disk consumption and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file...

CVE-2004-1885

WS_FTP Server 4.0.2 is affected by CVE-2004-1885. The vulnerability allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify iFtpSvc options processed by iftpmgr.exe. This is a local/remote code-execution style impact described in the records, ...

CVE-2004-1883

Multiple buffer overflows in Ipswitch WSFTP Server 4.0.2 1 allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or 2 may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to b...

CVE-2004-1848

Ipswitch WS_FTP Server 4.0.2 is affected by a remote denial-of-service vulnerability involving a REST command with an oversized size argument, followed by a STOR of a smaller file, which can cause disk consumption and bypass file-size restrictions. The issue is documented under CVE-2004-1848; rel...

CVE-2004-1883

The CVE-2004-1883 issue affects Ipswitch WS_FTP Server 4.0.2. It describes two buffer-overflow routes: (1) via a large error string generated by the ALLO handler that could let remote authenticated users execute arbitrary code, and (2) via a long hostname or username inserted into a reply to a ST...