CVE-2004-1883 Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may...
HighCVSS 7.2
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress ws ftp server | = 4.0.2 | No fix listed |
References
- 20040323 ALLO ALLO WS_FTP Server mailing-list
- 11206 patch third-party-advisory
- 20040323 Think of the buffers! Won't somebody think of the buffers?! mailing-list
- 9953 vdb-entry
- wsftp-allo-bo(15561) vdb-entry