John Harwold has discovered a vulnerability in Ipswitch WS_FTP Server, which can be exploited by malicious users to conduct script insertion attacks.

Parameters passed to valid FTP commands are not properly sanitised before the command is logged. This can be exploited to insert arbitrary HTML and script code, which is executed in the administrator's browser session in context of the administrative web interface when the malicious logs are viewed.

The vulnerability is confirmed in WS_FTP Server 6. Other versions may also be affected.

Solution
Update to version 6.1 or later.

Provided and/or discovered by
John Harwold, VDA Labs

Changelog
Further details available in Customer Area

Original Advisory
Ipswitch:
http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link13

John Harwold:
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065441.html

Deep Links
Links available in Customer Area