PT-2007-2119 · Ipswitch · Ipswitch Ws Ftp

Published 2007-02-02 · Updated 2018-10-16 · CVE-2007-0665

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch WS FTP 2007 Professional

Description A format string issue in the SCP module of Ipswitch WS FTP 2007 Professional may allow remote attackers to execute arbitrary commands by including format string specifiers in the filename, particularly when using the SHELL WS FTP script command.

Recommendations For Ipswitch WS FTP 2007 Professional, consider disabling the SCP module or restricting its use until a fix is available to prevent potential exploitation.

Fix

Related Identifiers

CVE-2007-0665

Affected Products

Ipswitch Ws Ftp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-0665 · Security Note
• http://securityfocus.com/bid/22275 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31865 · Note
• http://osvdb.org/33602 · Note
• http://securityfocus.com/archive/1/458293/100/0/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0665 · Note