IMail Server and WS_FTP Server Privilege Escalation Vulnerability
BID:218
Info
IMail Server and WS_FTP Server Privilege Escalation Vulnerability
| Bugtraq ID: | 218 |
| Class: | Access Validation Error |
| CVE: |
CVE-1999-1170 CVE-1999-1171 |
| Remote: | No |
| Local: | No |
| Published: | Feb 04 1999 12:00AM |
| Updated: | Jul 11 2009 12:16AM |
| Credit: | This vulnerability was posted to NTBugtraq by Marc <[email protected]>. |
| Vulnerable: |
Ipswitch WS_FTP Server 1.0.2 EVAL Ipswitch WS_FTP Server 1.0.1 EVAL Ipswitch IMail 5.0 |
| Not Vulnerable: | |
Discussion
IMail Server and WS_FTP Server Privilege Escalation Vulnerability
Non-administrative Imail and WS_FTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application interface (locally) to read email, create accounts, delete accounts, etc.
Non-administrative Imail and WS_FTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application interface (locally) to read email, create accounts, delete accounts, etc.
Exploit / POC
IMail Server and WS_FTP Server Privilege Escalation Vulnerability
Access the following registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Domains\Machine_name\Users\Username"
Modify the Flag value to read "1920". 1920 gives the user account administrator permissions to IMail and WS_FTP Server.
Access the following registry key "HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Domains\Machine_name\Users\Username"
Modify the Flag value to read "1920". 1920 gives the user account administrator permissions to IMail and WS_FTP Server.
Solution / Fix
IMail Server and WS_FTP Server Privilege Escalation Vulnerability
Solution:
Check with Ipswitch for a vendor patch.
Solution:
Check with Ipswitch for a vendor patch.
References
IMail Server and WS_FTP Server Privilege Escalation Vulnerability
References:
References: