CVE-2007-0665 Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to t...
MediumCVSS 6.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp pro | = 2007 | No fix listed |
References
- 33602 vdb-entry
- 20070126 WS_FTP 2007 Professional SCP handling format string vulnerability mailing-list
- 22275 vdb-entry vendor-advisory
- wsftp-scphandler-format-string(31865) vdb-entry