Описание
Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).
Ссылки
- Vendor Advisory
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ipswitch:ws_ftp_home:2007.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_pro:2007.1.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 99%
0.69433
Средний
9.3 Critical
CVSS2
Дефекты
CWE-134
Связанные уязвимости
github
почти 4 года назад
Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).
EPSS
Процентиль: 99%
0.69433
Средний
9.3 Critical
CVSS2
Дефекты
CWE-134