PT-2008-6744 · Ipswitch · Ipswitch Ws Ftp Server Manager

Luigi Auriemma · Published 2008-12-19 · Updated 2018-10-11 · CVE-2008-5692

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ipswitch WS FTP Server Manager versions prior to 6.1.1

Description The issue allows remote attackers to bypass authentication and read logs. This can be achieved by sending a logLogout action to the "FTPLogServer/login.asp" endpoint, followed by a request to the "FTPLogServer/LogViewer.asp" endpoint with the localhostnull account name.

Recommendations For Ipswitch WS FTP Server Manager versions prior to 6.1.1, update to version 6.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "FTPLogServer/login.asp" and "FTPLogServer/LogViewer.asp" endpoints to minimize the risk of exploitation.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-5692

Affected Products

Ipswitch Ws Ftp Server Manager

References · 11

• 🔥 https://exploit-db.com/exploits/31117 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5692 · Security Note
• http://aluigi.altervista.org/adv/wsftpweblog-adv.txt · Note
• http://securityfocus.com/archive/1/487686/100/200/threaded · Note
• http://vupen.com/english/advisories/2008/0473 · Note
• http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12 · Note
• http://securityreason.com/securityalert/4799 · Note
• http://secunia.com/advisories/28822 · Note
• http://securityfocus.com/bid/27654 · Note
• http://securityfocus.com/archive/1/487697/100/200/threaded · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5692 · Note