Unscored CVE-2004-1885 EUVD-2004-1878GHSA-jw9r-m7hp-gw6p

Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify …

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.

References

20040323 Open the WS_FTP Server backdoor to SYSTEM mailing-list
wftp-site-gain-priviliege(15558) vdb-entry
11206 third-party-advisory
9953 vdb-entry