Test ID:	1.3.6.1.4.1.25623.1.0.11098
Category:	FTP
Title:	WS_FTP Server < 3.1.2 Buffer Overflow Vulnerability
Summary:	WS_FTP Server is prone to a buffer overflow vulnerability.
Description:	Summary: WS_FTP Server is prone to a buffer overflow vulnerability. Vulnerability Insight: WS_FTP Server contains an unchecked buffer in routines that handle the 'CPWD' command arguments. The 'CPWD' command allows remote users to change their password. By issuing a malformed argument to the CPWD command, a user could overflow a buffer and execute arbitrary code on this host. Note that a local user account is required. Solution: Update to version 3.1.2 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0826 @stake Security Advisory: A080802-1 http://www.atstake.com/research/advisories/2002/a080802-1.txt BugTraq ID: 5427 http://www.securityfocus.com/bid/5427 http://www.iss.net/security_center/static/9794.php
Copyright	Copyright (C) 2002 Digital Defense Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.