Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ws_ftp_server | Progress | 4.0.2 (including) | 4.0.2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=108006581418116\u0026w=2
- http://secunia.com/advisories/11206
- http://www.securityfocus.com/bid/9953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15558
- http://marc.info/?l=bugtraq\u0026m=108006581418116\u0026w=2
- http://secunia.com/advisories/11206
- http://www.securityfocus.com/bid/9953
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15558