Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT (status) arguments.
| Software | From | Fixed in |
|---|---|---|
| ipswitch / ws_ftp_server | 4.01 | 4.01.x |
| progress / ws_ftp_server | 3.4 | 3.4.x |