Ipswitch WS_FTP SFTP Opendir Command Buffer Overflow Vulnerability

Bugtraq ID:	27573
Class:	Boundary Condition Error
CVE:	CVE-2008-0590
Remote:	Yes
Local:	No
Published:	Feb 02 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	Ipswitch WS_FTP Server 6.1 .0
Not Vulnerable:	Ipswitch WS_FTP Server 6.1.1 Ipswitch WS_FTP Server 7.1

Ipswitch WS_FTP SFTP Opendir Command Buffer Overflow Vulnerability

Ipswitch WS_FTP is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will result in a denial of service.

This issue affects WS_FTP 6.1.0.0; other versions may also be affected.

Ipswitch WS_FTP SFTP Opendir Command Buffer Overflow Vulnerability

The following proof-of-concept exploit is available:

• /data/vulnerabilities/exploits/27573.pl

Ipswitch WS_FTP SFTP Opendir Command Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Ipswitch WS_FTP SFTP Opendir Command Buffer Overflow Vulnerability

References:

• WS FTP Homepage (IpSwitch)
  
• IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow ([email protected])
  
• WS_FTP Server 6.1.1 with SSH & WS_FTP Server 6.1.1 (IpSwitch)