var-200309-0020
Vulnerability from variot

Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. It has been reported that a vulnerability exists in the processing of a "STAT" command on WS_FTP Servers versions 4.x and prior. Exploitation of this vulnerability may lead to an authenticated user executing arbitrary code with the elevated privileges of the server process. Ipswitch WS_FTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. Progress Software Ipswitch WS_FTP Server is a set of FTP server software developed by Progress Software Company in the United States. It provides functions such as file transfer control and transfer encryption

Show details on source website

To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200309-0020",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ws ftp server",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "ipswitch",
        "version": "4.01"
      },
      {
        "model": null,
        "scope": null,
        "trust": 1.6,
        "vendor": "ipswitch",
        "version": null
      },
      {
        "model": "ws ftp server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "progress",
        "version": "3.4"
      },
      {
        "model": "ws ftp server",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "ipswitch",
        "version": "3.4"
      },
      {
        "model": "ws ftp server",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ipswitch",
        "version": "4.0"
      },
      {
        "model": "ws ftp server",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "ipswitch",
        "version": "4.02"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "BID",
        "id": "8542"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "pejman d\u203b pejman@rite.ca",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2003-0772",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2003-0772",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.0,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "VHN-7597",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2003-0772",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#792284",
            "trust": 0.8,
            "value": "10.50"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#219140",
            "trust": 0.8,
            "value": "10.50"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200309-029",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-7597",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments. It has been reported that a vulnerability exists in the processing of a \"STAT\" command on WS_FTP Servers versions 4.x and prior. Exploitation of this vulnerability may lead to an authenticated user executing arbitrary code with the elevated privileges of the server process. Ipswitch WS_FTP Server is reported to be prone to buffer overruns when handling data supplied to the APPE and STAT FTP commands. Progress Software Ipswitch WS_FTP Server is a set of FTP server software developed by Progress Software Company in the United States. It provides functions such as file transfer control and transfer encryption",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      },
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "BID",
        "id": "8542"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      }
    ],
    "trust": 2.7
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-7597",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#792284",
        "trust": 2.5
      },
      {
        "db": "SECUNIA",
        "id": "9671",
        "trust": 2.5
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140",
        "trust": 2.5
      },
      {
        "db": "BID",
        "id": "8542",
        "trust": 2.0
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029",
        "trust": 0.7
      },
      {
        "db": "EXPLOIT-DB",
        "id": "23100",
        "trust": 0.1
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-76880",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "db": "BID",
        "id": "8542"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "id": "VAR-200309-0020",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-11-22T23:13:28.065000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Progress Software Ipswitch WS_FTP Server Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=118178"
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.7,
        "url": "http://www.securityfocus.com/bid/8542"
      },
      {
        "trust": 2.7,
        "url": "http://www.kb.cert.org/vuls/id/219140"
      },
      {
        "trust": 2.7,
        "url": "http://www.kb.cert.org/vuls/id/792284"
      },
      {
        "trust": 2.7,
        "url": "http://secunia.com/advisories/9671"
      },
      {
        "trust": 2.7,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/13119"
      },
      {
        "trust": 2.6,
        "url": "http://marc.info/?l=bugtraq\u0026m=106288825902868\u0026w=2"
      },
      {
        "trust": 0.8,
        "url": "about vulnerability notes"
      },
      {
        "trust": 0.8,
        "url": "contact us about this vulnerability"
      },
      {
        "trust": 0.8,
        "url": "provide a vendor statement"
      },
      {
        "trust": 0.8,
        "url": "http://www.secunia.com/advisories/9671/"
      },
      {
        "trust": 0.8,
        "url": "ftp://ftp.ipswitch.com/ipswitch/product_support/ws_ftp_server/ifs402.exe"
      },
      {
        "trust": 0.3,
        "url": "http://www.ipswitch.com/"
      },
      {
        "trust": 0.3,
        "url": "/archive/1/336441"
      },
      {
        "trust": 0.1,
        "url": "http://marc.info/?l=bugtraq\u0026amp;m=106288825902868\u0026amp;w=2"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "db": "BID",
        "id": "8542"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "db": "BID",
        "id": "8542"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2003-09-22T00:00:00",
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "date": "2003-09-22T00:00:00",
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "date": "2003-09-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "date": "2003-09-04T00:00:00",
        "db": "BID",
        "id": "8542"
      },
      {
        "date": "2003-09-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "date": "2003-09-22T04:00:00",
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2003-09-22T00:00:00",
        "db": "CERT/CC",
        "id": "VU#792284"
      },
      {
        "date": "2003-09-22T00:00:00",
        "db": "CERT/CC",
        "id": "VU#219140"
      },
      {
        "date": "2019-08-13T00:00:00",
        "db": "VULHUB",
        "id": "VHN-7597"
      },
      {
        "date": "2003-09-04T00:00:00",
        "db": "BID",
        "id": "8542"
      },
      {
        "date": "2020-05-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      },
      {
        "date": "2024-11-20T23:45:29.347000",
        "db": "NVD",
        "id": "CVE-2003-0772"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WS_FTP Server vulnerable to buffer overflow when supplied overly long \"APPE\" command",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#792284"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200309-029"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.