Title: Ipswitch WS_FTP Server Message Response Buffer Overflow Vulnerability
Severity: HIGH
Description:
Ipswitch WS_FTP is an FTP implementation that is available for Microsoft Windows operating systems.
Ipswitch WS_FTP is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The vulnerability occurs when handling FTP server message responses larger than 4100 bytes.
An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Affected Products:
- Ipswitch WS_FTP Home
- Ipswitch WS_FTP Pro
- Ipswitch WS_FTP Pro 5
- Ipswitch WS_FTP Pro 6.0.0
- Ipswitch WS_FTP Pro 7.5.0
- Ipswitch WS_FTP Pro 8.0.0 2
- Ipswitch WS_FTP Pro 8.0.0 3
References:
- IpSwitch: WS FTP Homepage