CVE-2004-1883 - Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to ex

CVE-2004-1883

Summary

Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.

References

Vulnerable Configurations

cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 11-10-2023 - 14:45)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	9953
bugtraq	20040323 ALLO ALLO WS_FTP Server 20040323 Think of the buffers! Won't somebody think of the buffers?!
secunia	11206
xf	wsftp-allo-bo(15561)

Last major update

11-10-2023 - 14:45

Published

31-12-2004 - 05:00

Last modified

11-10-2023 - 14:45