421 matches found
CVE-2002-0826
Buffer overflow in WSFTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command...
CVE-2001-1021
WS_FTP Server (Ipswitch) before version 2.0.3 is affected by a buffer overflow vulnerability (CVE-2001-1021) that can be triggered by long arguments to multiple FTP commands (DELE, MDTM, MLST, MKD, RMD, RNFR, RNTO, SIZE, STAT, XMKD, XRMD). The connected OpenVAS/Nessus entries corroborate a remote...
CVE-2001-1021
Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...
WS-FTP Server vulnerable to buffer overflow via long string sent as argument to ftp command
Overview A remotely exploitable buffer overflow exists in the IPSWITCH WSFTP Server. Description Defcom Labs has discovered a remotely exploitable buffer overflow vulnerability in the IPSWITCH WSFTP Server on all platforms that allows intruders to execute arbitrary code with the privileges of the...
def-2001-31
====================================================================== Defcom Labs Advisory def-2001-31 WSFTP server 2.0.3 Buffer Overflow Author: Andreas Junestam [email protected] Co-Author: Janne Sarendal [email protected] Release Date: 2001-10-05...
Ipswitch WS_FTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow
Ipswitch WSFTP Server 1.0.x2.0.x - STAT Remote Buffer Overflow source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP...
Ipswitch WS_FTP Server 1.0.x/2.0.x - 'STAT' Remote Buffer Overflow
source: https://www.securityfocus.com/bid/3507/info WSFTP Server, a popular FTP server for Microsoft Windows platforms, is vulnerable to a buffer overflow condition when a user submits a specially crafted legitimate FTP command. WSFTP Server by default runs as a SYSTEM service. If a logged in use...
CVE-1999-1078
The CVE applies to Ipswitch WS_FTP Pro (6.0) where passwords are stored with weak encryption in initialization files. This enables a remote attacker to decrypt stored passwords and potentially gain privileges. OpenVAS and Nessus entries corroborate weak stored password issues in WS_FTP Pro/Client...
CVE-1999-1078
WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...
CVE-1999-1171
IPswitch WSFTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...
CVE-1999-1171
IPswitch WS_FTP contains a local privilege escalation flaw: by setting the flags registry key to 1920, a local user can gain additional privileges and modify or add mail accounts. The PT-1999-1600 entry confirms this issue but does not specify affected versions, and the original CVE description m...
CVE-2001-1021
Buffer overflows in WSFTP 2.02 allow remote attackers to execute arbitrary code via long arguments to 1 DELE, 2 MDTM, 3 MLST, 4 MKD, 5 RMD, 6 RNFR, 7 RNTO, 8 SIZE, 9 STAT, 10 XMKD, or 11 XRMD...
Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows
Ipswitch WSFTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows source: https://www.securityfocus.com/bid/3102/info WS-FTP Server is vulnerable to malicious remote user input argumenting multiple FTP commands received from anonymously connecting clients. An attacker may supply a long...
DST2K0009.txt
================================================================================ Delphis Consulting Plc ================================================================================ Security Team Advisories 31/05/2000 [email protected] http://www.delphisplc.com/thinking/whitepapers/...
CVE-1999-0362
The CVE is for WS_FTP Server DoS via the CWD command. Affected software is WS_FTP Server; vulnerability arises when a CWD command with a long argument crashes the service, leading to a denial of service (availability impact). Public references describe this as a remote DoS issue with the CWD hand...
CVE-1999-0362
WSFTP server remote denial of service through cwd command...
CVE-1999-1078
WSFTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges...
Ipswitch IMail 5.0 Ipswitch WS_FTP Server 1.0.11.0.2 - Local Privilege Escalation
Ipswitch IMail 5.0 Ipswitch WSFTP Server 1.0.11.0.2 - Local Privilege Escalation source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a...
Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation
source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application...