high7.5Public exploit code
CVE-2001-1021
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch WS_FTP Server 2.0 - Anonymous Multiple FTP Command Buffer Overflows2001-07-25 · remote · windows · Verified
- Ipswitch WS_FTP Server 5.03 - 'RNFR' Buffer Overflow2004-11-29 · dos · windows · Verified
Impact
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Ws Ftp Server | Version 2.0.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html
- http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6911
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html
- http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6911