CVE-2004-1848

CVE-2004-1848 describes a denial of service vulnerability in Ipswitch WS_FTP Server 4.0.2 and Progress WS_FTP Server. Remote attackers can exploit this by sending a REST command with a large size argument, followed by a smaller STOR command, leading to excessive disk consumption and bypassing file size restrictions. This unauthenticated network-based attack has low complexity, resulting in a partial denial of service (disk consumption), reflected by its CVSS score of 5.0 (Medium). Although not listed on CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, it is noted as "Active" on the Hot List and has received some community discussion.