WS_FTP Server buffer overflow adn backdor updated since 05.11.2001
Published:		30.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		1550
Type:		remote
Level:		6/10
Description:		Buffer overflow in STAT and another commands. Built-in user accaount XXSESS_MGRYY with password X#1833 allows command execution on server.

Affected:		IPSWITCH : WS_FTP server 2.0
		IPSWITCH : WS_FTP server 4.0
		IPSWITCH : WS_FTP server 5.0
		IPSWITCH : WS_FTP server 5.03

Original document		Reed Arvin, Multiple buffer overlows in WS_FTP Server Version 5.03, 2004.10.14. (30.11.2004)
		Hugh Mann, How to crash a harddisk - the Ipswitch WS_FTP Server way (24.03.2004)
		Hugh Mann, Think of the buffers! Won't somebody think of the buffers?! (24.03.2004)
		Hugh Mann, Open the WS_FTP Server backdoor to SYSTEM (24.03.2004)
		Hugh Mann, ALLO ALLO WS_FTP Server (24.03.2004)
		pejman d, Remote and Local Vulnerabilities In WS_FTP Server (23.10.2003)
		andreas junestam, def-2001-31 (05.11.2001)

Files:		WS_FTP server 2.0.3 exploit
		WS_FTP Server STAT command overflow
		x86/win32 WS_FTP FTPD "STAT" command remote stack buffer overflow exploit
		WS_FTP server ALLO exploit
Discuss:		Read or add your comments to this news (0 comments)