Priority HIGH 74
Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.84883 · Published 2003-09-12 · No fix listed
Priority HIGH 70
Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.85519 · Published 2006-09-19 · No fix listed
Priority HIGH 65
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands.
CVSS 2.0MEDIUM 6.5· Network · Low privileges · Interaction — · EPSS 0.64369 · Published 2006-09-26 · No fix listed
Priority MEDIUM 54
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.49642 · Published 2004-12-08 · No fix listed
Priority MEDIUM 47
An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02942 · Published 2019-06-11 · No fix listed CWE-22
Priority MEDIUM 47
Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the (1) Files and (2) Summary t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.32435 · Published 2006-09-26 · No fix listed
Priority MEDIUM 46
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.03968 · Published 2019-06-11 · No fix listed CWE-22
Priority MEDIUM 42
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05805 · Published 2005-05-10 · No fix listed
Priority MEDIUM 40
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04735 · Published 2019-06-11 · No fix listed CWE-22
Priority MEDIUM 40
Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04275 · Published 2006-09-25 · No fix listed
Priority LOW 34
Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01932 · Published 2007-02-02 · No fix listed
Priority LOW 34
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.08085 · Published 2005-05-10 · No fix listed CWE-399
Priority LOW 27
WS_FTP server remote denial of service through cwd command.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02052 · Published 1999-09-29 · No fix listed