Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ws_ftp_server | Ipswitch | 1.0.1eval (including) | 1.0.1eval (including) |
| Ws_ftp_server | Ipswitch | 1.0.2eval (including) | 1.0.2eval (including) |
| Ws_ftp_server | Ipswitch | 3.0_1 (including) | 3.0_1 (including) |
| Ws_ftp_server | Ipswitch | 4.01 (including) | 4.01 (including) |
| Ws_ftp_server | Ipswitch | 5.02 (including) | 5.02 (including) |
| Ws_ftp_server | Ipswitch | 5.03 (including) | 5.03 (including) |
| Ws_ftp_server | Progress | * | 5.05 (including) |
| Ws_ftp_server | Progress | 1.0.1 (including) | 1.0.1 (including) |
| Ws_ftp_server | Progress | 1.0.1.e (including) | 1.0.1.e (including) |
| Ws_ftp_server | Progress | 1.0.2 (including) | 1.0.2 (including) |
| Ws_ftp_server | Progress | 1.0.2.e (including) | 1.0.2.e (including) |
| Ws_ftp_server | Progress | 1.0.3 (including) | 1.0.3 (including) |
| Ws_ftp_server | Progress | 1.0.4 (including) | 1.0.4 (including) |
| Ws_ftp_server | Progress | 1.0.5 (including) | 1.0.5 (including) |
| Ws_ftp_server | Progress | 2.0 (including) | 2.0 (including) |
| Ws_ftp_server | Progress | 2.0.1 (including) | 2.0.1 (including) |
| Ws_ftp_server | Progress | 2.0.2 (including) | 2.0.2 (including) |
| Ws_ftp_server | Progress | 2.0.3 (including) | 2.0.3 (including) |
| Ws_ftp_server | Progress | 2.0.4 (including) | 2.0.4 (including) |
| Ws_ftp_server | Progress | 3.0 (including) | 3.0 (including) |
| Ws_ftp_server | Progress | 3.1 (including) | 3.1 (including) |
| Ws_ftp_server | Progress | 3.1.1 (including) | 3.1.1 (including) |
| Ws_ftp_server | Progress | 3.1.2 (including) | 3.1.2 (including) |
| Ws_ftp_server | Progress | 3.1.3 (including) | 3.1.3 (including) |
| Ws_ftp_server | Progress | 3.4 (including) | 3.4 (including) |
| Ws_ftp_server | Progress | 4.0 (including) | 4.0 (including) |
| Ws_ftp_server | Progress | 4.0.2 (including) | 4.0.2 (including) |