CVE-2004-1885

Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.

Date published : 2005-05-10

http://www.securityfocus.com/bid/9953

http://marc.info/?l=bugtraq&m=108006581418116&w=2