Description
Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| WS_FTP Server | Progress Software Corporation / WS_FTP Server | >= 8.7.0, < 8.7.4 | affected |
| WS_FTP Server | Progress Software Corporation / WS_FTP Server | >= 8.8.0, < 8.8.2 | affected |