CVE-2003-0772: ipswitch ws_ftp_server

EPSS trend

Probability

84.88%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 84.88% on 20-09-2026

20-09-202620-10-2026

EPSS score

84.88%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
Ipswitch WS_FTP Server 3.4/4.0 - FTP Command Buffer Overrun
Maturity: weaponized

References

6 links

marc.info?l=bugtraq&m=106288825902868&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/8542VDB EntryX Refsource BIDExploitVendor Advisory
www.kb.cert.org/vuls/id/219140Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.kb.cert.org/vuls/id/792284Third Party AdvisoryX Refsource CERT VNUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/13119VDB EntryX Refsource XF
secunia.com/advisories/9671Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2007-0666ipswitchws_ftp_server1.92%19y ago02-02-2007 21:00Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.CVE-2001-1021progressws_ftp_server42.14%24y ago02-02-2002 05:00Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.CVE-2008-0590progressws_ftp_server22.17%18y ago05-02-2008 11:00Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long opendir command.CVE-2022-27665progressws_ftp_server+133.11%3y ago03-04-2023 00:00Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead to execution of malicious code and commands on the client due to improper handling of user-provided input. By inputting malicious payloads in the subdirectory searchbar or Add folder filename boxes, it is possible to execute client-side commands. For example, there is Client-Side Template Injection via subFolderPath to the ThinClient/WtmApiService.asmx/GetFileSubTree URI.CVE-1999-1171ipswitchimail+14.89%25y ago12-09-2001 04:00IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.CVE-1999-1170ipswitchimail+13.68%25y ago12-09-2001 04:00IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

All vulnerabilities inws_ftp_server ws_ftp_server

CVE-2003-0772: ipswitch ws_ftp_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References