漏洞描述
Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/28983↗secunia.comhttp://secunia.com/advisories/21932↗www.osvdb.orghttp://www.osvdb.org/28939↗www.securityfocus.comhttp://www.securityfocus.com/bid/20076↗www.vupen.comhttp://www.vupen.com/english/advisories/2006/3655↗ipswitch.comhttp://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp↗