WS_FTP XCRC/XSHA1/XMD5 overflow analysis-vulnerability warning-the black bar safety net

Starter to: After testing found that, if only WSFTP 5.05 above only supports XCRC/XSHA1/XMD5 these commands, this vulnerability is relatively simple, directly send the XCRC long string can be triggered. 以 iFtpSvc.exe 5.05 as an example: . text:0041E5CF loc41E5CF: ; CODE XREF: sub41DB09+AB7j...

IpSwitch WS_FTP Server buffer overflow

Buffer overflow in XCRC, XSHA1, XMD5, Checksum FTP commands...

Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Ipswitch WSFTP Server. Anonymous access or authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during the parsing of long string...