Signature Detail

FTP: WS_FTP Server Command Buffer Overflow

This signature detects buffer overflow attempts against WS_FTP. Because WS_FTP does not perform sufficient bounds checking on network data before copying the data into process buffers, attackers may remotely execute arbitrary code on the server with the privileges of the user that activated WS_FTP.

Extended Description

Ipswitch WS_FTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. An FTP user who supplies excessive input to these commands could potentially execute arbitrary code in the context of the server or cause a denial of service.

Affected Products

• Ipswitch ws_ftp_server 3.4.0
• Ipswitch ws_ftp_server 4.0.0
• Ipswitch ws_ftp_server 4.0.0 1

References

• BugTraq: 8542
• BugTraq: 38262
• CVE: CVE-2003-0772
• URL: http://paulmakowski.wordpress.com/2010/02/28/increasing-payload-size-w-return-address-overwrite/
• URL: http://paulmakowski.wordpress.com/2010/04/19/metasploit-plugin-for-easyftp-server-exploit
• URL: http://seclists.org/bugtraq/2010/Feb/202