CVE-2004-1883

CVE-2004-1883 describes multiple buffer overflow vulnerabilities in Ipswitch WS_FTP Server 4.0.2. These flaws allow remote authenticated users to execute arbitrary code via a large error string from the ALLO handler, or remote FTP administrators to execute arbitrary code by inserting long hostnames or usernames into STAT command replies during file transfers. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), this vulnerability is considered highly severe due to its potential for complete compromise with low attack complexity. While not listed on CISA's KEV catalog, an exploit for the ALLO buffer overflow exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.