CVE-2004-1885 Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.
HighCVSS 7.2
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress ws ftp server | = 4.0.2 | No fix listed |
References
- 20040323 Open the WS_FTP Server backdoor to SYSTEM mailing-list
- 11206 exploit patch third-party-advisory
- 9953 exploit vdb-entry
- wftp-site-gain-priviliege(15558) vdb-entry