securfrog has discovered a vulnerability in WS_FTP Home and Professional, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to a format string error when processing responses of the FTP server. This can be exploited by e.g. tricking a user into connecting to a malicious FTP server.

Successful exploitation may allow the execution of arbitrary code.

The vulnerability is confirmed in WS_FTP Home version 2007.0.0.2 and WS_FTP Professional version 2007.1.0.0. Other versions may also be affected.

Solution
The vendor has issued hotfixes for some versions.
Further details available to Secunia VIM customers

Provided and/or discovered by
securfrog

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/6257

Deep Links
Links available to Secunia VIM customers