Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
BID:11772
Info
Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 11772 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 29 2004 12:00AM |
| Updated: | Nov 29 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Reed Arvin <[email protected]>. |
| Vulnerable: |
Ipswitch WS FTP Server 5.0.3 |
| Not Vulnerable: | |
Discussion
Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
Multiple remote buffer overflow vulnerabilities are reported in the Ipswitch WS_FTP server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers.
An attacker may exploit these issues to cause the affected server to crash. It is likely that execution of arbitrary code with the privileges of the user who activated the vulnerable application is also possible.
Multiple remote buffer overflow vulnerabilities are reported in the Ipswitch WS_FTP server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers.
An attacker may exploit these issues to cause the affected server to crash. It is likely that execution of arbitrary code with the privileges of the user who activated the vulnerable application is also possible.
Exploit / POC
Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
The following exploits have been provided to crash the affected server and connect back respectively. The exploit 'wsftp_server_503_mkd.pm' has been provided for the Metasploit Framework:
The following exploits have been provided to crash the affected server and connect back respectively. The exploit 'wsftp_server_503_mkd.pm' has been provided for the Metasploit Framework:
Solution / Fix
Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Ipswitch WS_FTP Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- Ipswitch Homepage (Ipswitch)
- WS FTP Server Support Homepage (IPSwitch)
- Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14. (Reed Arvin