CVE-2008-0590

WS_FTP Server 6.1.0.0 - Authenticated Buffer Overflow via Long Opendir Command

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-0590. PoCs published by securfrog.

AI-analyzed exploit summary This exploit triggers a remote buffer overflow in IpSwitch WS_FTP Server 6.1.0.0 via a maliciously crafted SFTP directory name. The PoC sends a long string of 'A' characters (5131 bytes) to overflow the buffer, causing an access violation.

Description

Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long opendir command.

Exploits (1)

exploitdb WORKING POC VERIFIED
by securfrog · perldoswindows
https://www.exploit-db.com/exploits/5044

This exploit triggers a remote buffer overflow in IpSwitch WS_FTP Server 6.1.0.0 via a maliciously crafted SFTP directory name. The PoC sends a long string of 'A' characters (5131 bytes) to overflow the buffer, causing an access violation.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: IpSwitch WS_FTP Server 6.1.0.0
Auth required
Prerequisites: Network access to the target · Valid SSH credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27573
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487441/100/0/threaded
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0400/references
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/5044
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28753
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3609

Scores

EPSS 0.2217
EPSS Percentile 97.4%

Details

CWE
CWE-119
Status published
Products (1)
progress/ws_ftp_server 6.1.0.0
Published Feb 05, 2008
Tracked Since Feb 18, 2026