vendor:
WS_FTP Server
by:
XFOCUS Security Team
7.5
CVSS
HIGH
Buffer Overrun
119
CWE
Product Name: WS_FTP Server
Affected Version From: WS_FTP Server 4.0.1
Affected Version To: WS_FTP Server 4.0.1
Patch Exists: NO
Related CWE:
CPE: a:ipswitch:ws_ftp_server:4.0.1
Platforms Tested: Windows 2000 server EN
2003
Buffer Overrun in Ipswitch WS_FTP Server
This exploit takes advantage of a buffer overrun vulnerability in Ipswitch WS_FTP Server when handling the APPE and STAT FTP commands. An FTP user can send excessive input to these commands, potentially executing arbitrary code on the server or causing a denial of service.
Mitigation:
Apply the latest patches or updates provided by the vendor. Restrict access to the FTP server only to trusted users. Regularly monitor the server for any suspicious activity.