← Vulnerability feed

Vulnerability record · CVE-2002-1851 · published 31 December 2002

CVE-2002-1851: Ipswitch ws ftp pro vulnerability

Ipswitch · Ws Ftp Pro

Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.

7.5 CVSS 2.0 High EPSS 3.4% · top 11.4%
7.5CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.iss.net/security_center/static/10185.php
http://www.nextgenss.com/vna/ips-wsftp.txt
http://www.securityfocus.com/bid/4850
http://www.iss.net/security_center/static/10185.php
http://www.nextgenss.com/vna/ips-wsftp.txt
http://www.securityfocus.com/bid/4850

Track CVE-2002-1851 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-3734Ipswitch ws ftp home vulnerabilityFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of serv…EPSS 14%7.5CVE-2007-0330Ipswitch ws ftp pro vulnerabilityBuffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (…EPSS 3.4%7.5CVE-2004-1884Ipswitch ws ftp pro vulnerabilityIpswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.EPSS 5.8%7.5CVE-1999-1078Ipswitch ws ftp pro vulnerabilityWS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain…EPSS 1.8%6.8CVE-2007-0665Ipswitch ws ftp pro vulnerabilityFormat string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via for…EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-2002-1851), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.