CVE-2007-0666 Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp server | = 5.04 | No fix listed |
References
- 33646 vdb-entry
- 33647 vdb-entry
- 20070201 Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities mailing-list
- 20070202 Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities mailing-list
- 20070202 Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities mailing-list
- 20070202 Re: Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities mailing-list
- wsftp-iftpaddu-privilege-escalation(32176) vdb-entry