CVE-2001-1021 Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD...
HighCVSS 7.5
EPSS 42.1%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress ws ftp server | = 2.0.2 | No fix listed |
References
- 20010726 def-2001-28 - WS_FTP server 2.0.2 Buffer Overflow and possible DOS exploit mailing-list patch vendor-advisory
- www.ipswitch.com patch
- wsftp-long-command-bo(6911) vdb-entry