Niv Levy

Insufficient resource limits in Progress Software WS FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service.

A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation.

A path traversal vulnerability in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.

Missing authorization in the administrative interface on Windows allows a delegated Host Administrator to exceed their authorized scope. This can lead to arbitrary command execution with elevated privileges, potentially resulting in a complete compromise of the underlying server.

A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.

A stack-based buffer overflow occurs when user-controlled data is improperly copied into a fixed-size stack buffer without bounds checking. This allows an attacker who can control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than it can hold, potentially overwriting adjacent memory.

An improper authentication issue exists in Progress MOVEit Transfer, which may allow an attacker to bypass authentication mechanisms.

A limited authentication bypass by spoofing exists within the HTTPS module of the software.

An incorrect authorization issue exists within the Audit User module, which may allow unauthorized access or actions.

An issue exists in the Custom Reports modules involving improper neutralization of special elements in data query logic. This flaw can lead to the manipulation of data queries.

A relative path traversal issue exists within the Admin Settings module. Path traversal is a flaw that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables that control a file path.

The issue allows for Server-Side Request Forgery (SSRF), which may expose the local OS user's NTLMv2 hash.

A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method.

The issue allows authenticated users to exfiltrate files from the server via an unspecified method. This is related to files or directories being accessible to external parties.

A cross-site scripting (XSS) issue exists in the file browser when file transfer is enabled to a shared location. This allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.