CVE-2003-0772 Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
HighCVSS 7.5
EPSS 84.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp server | = 4.01 | No fix listed |
| progress ws ftp server | = 3.4 | No fix listed |
References
- 20030906 Remote and Local Vulnerabilities In WS_FTP Server mailing-list
- 9671 third-party-advisory
- VU#219140 third-party-advisory us-government-resource
- VU#792284 third-party-advisory us-government-resource
- 8542 exploit vdb-entry vendor-advisory
- wsftp-ftp-command-bo(13119) vdb-entry