Bugtraq mailing list archives
Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
From: "Steven M. Christey" <coley () mitre org>
Date: Fri, 2 Feb 2007 14:48:39 -0500 (EST)
Michal, iFTPAddU is for adding users, and iFTPAddH is for adding virtual hosts. These sound like administator-level controls. Presumably, the same admin already had the access to install WS_FTP in the first place. So, it doesn't seem like these cross any privilege boundaries, so they don't sound like vulnerabilities. Am I missing something here? - Steve
Current thread:
- Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities Steven M. Christey (Feb 02)
- Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities 3APA3A (Feb 02)
- <Possible follow-ups>
- Re: Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities michal . bucko (Feb 03)
- Re: Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities ismaelalfaro (Feb 12)