PT-2008-6744 · Ipswitch · Ipswitch Ws Ftp Server Manager

Luigi Auriemma · Publicado 2008-12-19 · Atualizado 2018-10-11 · CVE-2008-5692

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ipswitch WS FTP Server Manager versions prior to 6.1.1

Description The issue allows remote attackers to bypass authentication and read logs. This can be achieved by sending a logLogout action to the "FTPLogServer/login.asp" endpoint, followed by a request to the "FTPLogServer/LogViewer.asp" endpoint with the localhostnull account name.

Recommendations For Ipswitch WS FTP Server Manager versions prior to 6.1.1, update to version 6.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "FTPLogServer/login.asp" and "FTPLogServer/LogViewer.asp" endpoints to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-5692

Produtos afetados

Ipswitch Ws Ftp Server Manager

Referências · 11

• 🔥 https://exploit-db.com/exploits/31117 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5692 · Nota de Segurança
• http://aluigi.altervista.org/adv/wsftpweblog-adv.txt · Nota
• http://securityfocus.com/archive/1/487686/100/200/threaded · Nota
• http://vupen.com/english/advisories/2008/0473 · Nota
• http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12 · Nota
• http://securityreason.com/securityalert/4799 · Nota
• http://secunia.com/advisories/28822 · Nota
• http://securityfocus.com/bid/27654 · Nota
• http://securityfocus.com/archive/1/487697/100/200/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5692 · Nota