|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
From: Steven M. Christey (coley
mitre.org)
Date: Fri Feb 02 2007 - 13:48:39 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Michal,
iFTPAddU is for adding users, and iFTPAddH is for adding virtual
hosts. These sound like administator-level controls. Presumably, the
same admin already had the access to install WS_FTP in the first
place. So, it doesn't seem like these cross any privilege boundaries,
so they don't sound like vulnerabilities.
Am I missing something here?
- Steve
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]