Test ID:	1.3.6.1.4.1.25623.1.0.14598
Category:	FTP
Title:	WS_FTP Server Multiple Vulnerabilities (Nov 2005)
Summary:	WS_FTP Server is prone to multiple vulnerabilities.
Description:	Summary: WS_FTP Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - A buffer overflow, caused by a vulnerability in the ALLO handler, an attacker can then execute arbitrary code - A flaw which allow an attacker to gain elevated privileges (SYSTEM level privileges) - A local or remote attacker, with write privileges on a directory can create a specially crafted file containing a large REST argument and resulting to a denial of service. Solution: Update to the latest version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1848 BugTraq ID: 9953 http://www.securityfocus.com/bid/9953 Bugtraq: 20040323 How to crash a harddisk - the Ipswitch WS_FTP Server way (Google Search) http://marc.info/?l=bugtraq&m=108006717731989&w=2 http://www.osvdb.org/4542 http://securitytracker.com/id?1009529 http://secunia.com/advisories/11206 XForce ISS Database: wsftp-rest-dos(15560) https://exchange.xforce.ibmcloud.com/vulnerabilities/15560 XForce ISS Database: wsftp-rest-stor-dos(41831) https://exchange.xforce.ibmcloud.com/vulnerabilities/41831 Common Vulnerability Exposure (CVE) ID: CVE-2004-1883 Bugtraq: 20040323 ALLO ALLO WS_FTP Server (Google Search) http://marc.info/?l=bugtraq&m=108006553222397&w=2 Bugtraq: 20040323 Think of the buffers! Won't somebody think of the buffers?! (Google Search) http://www.securityfocus.com/archive/1/358361 XForce ISS Database: wsftp-allo-bo(15561) https://exchange.xforce.ibmcloud.com/vulnerabilities/15561 Common Vulnerability Exposure (CVE) ID: CVE-2004-1884 Bugtraq: 20040323 Open the WS_FTP Server backdoor to SYSTEM (Google Search) http://marc.info/?l=bugtraq&m=108006581418116&w=2 XForce ISS Database: wftp-site-gain-priviliege(15558) https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 Common Vulnerability Exposure (CVE) ID: CVE-2004-1885 Common Vulnerability Exposure (CVE) ID: CVE-2004-1886
Copyright	Copyright (C) 2005 David Maciejak

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.