CVE-2004-1643: Medium severity progress ipswitch ws ftp server vulnerability
Published Aug 29, 2004
·Updated
WSFTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
Affected Software
2 affected components
Progress Ipswitch Ws Ftp Server=5.0.2
Progress Ws Ftp Server=5.0.2
Remediation
Patch Available
Event History
Aug 29, 2004
CVE Published
04:00 AM
Feb 20, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1643?
CVE-2004-1643 has a medium severity rating due to its ability to cause denial of service by exhausting CPU resources.
2
How do I fix CVE-2004-1643?
To fix CVE-2004-1643, upgrade to a patched version of Ipswitch WS FTP Server that resolves this vulnerability.
3
What systems are affected by CVE-2004-1643?
CVE-2004-1643 specifically affects Ipswitch WS FTP Server version 5.0.2.
4
What kind of attack does CVE-2004-1643 mitigate against?
CVE-2004-1643 mitigates against denial of service attacks resulting from specific invalid path commands.
5
Who can exploit CVE-2004-1643?
Remote authenticated users can exploit CVE-2004-1643 by sending CD commands with invalid paths to the vulnerable FTP server.