CVE-1999-1171

IPswitch WS_FTP - Privilege Escalation

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1171. PoCs published by Marc.

AI-analyzed exploit summary This is a technical writeup describing a privilege escalation vulnerability in Imail and WS_FTP Server. The vulnerability allows non-administrative users to elevate their privileges by modifying a specific registry value.

Description

IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Marc · textlocalwindows
https://www.exploit-db.com/exploits/19167

This is a technical writeup describing a privilege escalation vulnerability in Imail and WS_FTP Server. The vulnerability allows non-administrative users to elevate their privileges by modifying a specific registry value.

Classification
Writeup 90%
Attack Type
Lpe
Complexity
Trivial
Reliability
Reliable
Target: Imail and WS_FTP Server
Auth required
Prerequisites: Access to the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Ipswitch\IMail\Domains\Machine_name\Users\Username'
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Mailing List mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=91816507920544&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/218

Scores

EPSS 0.0489
EPSS Percentile 91.0%

Details

Status published
Products (3)
ipswitch/imail 5.0
progress/ws_ftp_server 1.0.1.e
progress/ws_ftp_server 1.0.2.e
Published Feb 02, 1999
Tracked Since Feb 18, 2026