Re: Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities

[michal.bucko () hack pl]

Steve,

I agree that both: iFTPAddU and iFTPAddH resemble administrator-level controls. Moreover, they are administrator-level 
controls. But, as ZARAZA said, the problem still remains. The successful exploitation of the issues might result in 
privilege escalation, therefore I called the aforementioned issues - the vulnerabilities. 

kind rgds,
michal "jest" be.