medium5.0Public exploit code
CVE-2004-1643
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" seque…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch WS_FTP Server 5.0.x - CD Command Malformed File Path Remote Denial of Service2004-08-30 · dos · windows · Verified
Impact
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Ws Ftp Server | Version 5.0.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109389890712888&w=2
- http://secunia.com/advisories/12406
- http://www.securityfocus.com/bid/11065
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17155
- http://marc.info/?l=bugtraq&m=109389890712888&w=2
- http://secunia.com/advisories/12406
- http://www.securityfocus.com/bid/11065
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17155