CVE-2004-1848 Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR...
MediumCVSS 5.0
EPSS 8.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp server | = 3.0_1 | No fix listed |
| ipswitch ws ftp server | = 4.01 | No fix listed |
| progress ws ftp server | = 1.0.1 | No fix listed |
| progress ws ftp server | = 1.0.2 | No fix listed |
| progress ws ftp server | = 1.0.3 | No fix listed |
| progress ws ftp server | = 1.0.4 | No fix listed |
| progress ws ftp server | = 1.0.5 | No fix listed |
| progress ws ftp server | = 2.0 | No fix listed |
| progress ws ftp server | = 2.0.1 | No fix listed |
| progress ws ftp server | = 2.0.2 | No fix listed |
| progress ws ftp server | = 2.0.3 | No fix listed |
| progress ws ftp server | = 2.0.4 | No fix listed |
| progress ws ftp server | = 3.0 | No fix listed |
| progress ws ftp server | = 3.1 | No fix listed |
| progress ws ftp server | = 3.1.1 | No fix listed |
| progress ws ftp server | = 3.1.2 | No fix listed |
| progress ws ftp server | = 3.1.3 | No fix listed |
| progress ws ftp server | = 3.4 | No fix listed |
| progress ws ftp server | = 4.0 | No fix listed |
| progress ws ftp server | = 4.0.2 | No fix listed |
References
- 20040323 How to crash a harddisk - the Ipswitch WS_FTP Server way mailing-list
- 11206 exploit patch third-party-advisory
- 1009529 exploit vdb-entry
- 4542 vdb-entry
- 9953 exploit vdb-entry
- wsftp-rest-dos(15560) vdb-entry
- wsftp-rest-stor-dos(41831) vdb-entry