Lucene search

[email protected]CVE-2008-5692

HistoryDec 19, 2008 - 6:30 p.m.

CVE-2008-5692

2008-12-1918:30:00

CWE-287

[email protected]

web.nvd.nist.gov

ipswitch

ws_ftp

server manager

vulnerability

authentication bypass

log viewer

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.9%

JSON

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.

Affected configurations

NVD

Node

ipswitchws_ftpRange≤6.1

ipswitchws_ftpMatch1.0.5

ipswitchws_ftpMatch2.01

ipswitchws_ftpMatch2.02

ipswitchws_ftpMatch2.03

ipswitchws_ftpMatch3.0

ipswitchws_ftpMatch3.0.1

ipswitchws_ftpMatch3.1.0

ipswitchws_ftpMatch3.1.1

ipswitchws_ftpMatch3.1.2

ipswitchws_ftpMatch3.1.3

ipswitchws_ftpMatch3.14

ipswitchws_ftpMatch4.00

ipswitchws_ftpMatch4.01

ipswitchws_ftpMatch4.02

ipswitchws_ftpMatch5.00

ipswitchws_ftpMatch5.01

ipswitchws_ftpMatch5.02

ipswitchws_ftpMatch5.03

ipswitchws_ftpMatch5.04

ipswitchws_ftpMatch5.05

ipswitchws_ftpMatch6.0

CPENameOperatorVersion
ipswitch:ws_ftpipswitch ws ftple6.1
ipswitch:ws_ftpipswitch ws ftpeq1.0.5
ipswitch:ws_ftpipswitch ws ftpeq2.01
ipswitch:ws_ftpipswitch ws ftpeq2.02
ipswitch:ws_ftpipswitch ws ftpeq2.03
ipswitch:ws_ftpipswitch ws ftpeq3.0
ipswitch:ws_ftpipswitch ws ftpeq3.0.1
ipswitch:ws_ftpipswitch ws ftpeq3.1.0
ipswitch:ws_ftpipswitch ws ftpeq3.1.1
ipswitch:ws_ftpipswitch ws ftpeq3.1.2

CPE	Name	Operator	Version
ipswitch:ws_ftp	ipswitch ws ftp	le	6.1
ipswitch:ws_ftp	ipswitch ws ftp	eq	1.0.5
ipswitch:ws_ftp	ipswitch ws ftp	eq	2.01
ipswitch:ws_ftp	ipswitch ws ftp	eq	2.02
ipswitch:ws_ftp	ipswitch ws ftp	eq	2.03
ipswitch:ws_ftp	ipswitch ws ftp	eq	3.0
ipswitch:ws_ftp	ipswitch ws ftp	eq	3.0.1
ipswitch:ws_ftp	ipswitch ws ftp	eq	3.1.0
ipswitch:ws_ftp	ipswitch ws ftp	eq	3.1.1
ipswitch:ws_ftp	ipswitch ws ftp	eq	3.1.2

Rows per page:

1-10 of 221

References

aluigi.altervista.org/adv/wsftpweblog-adv.txt

docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12

secunia.com/advisories/28822

securityreason.com/securityalert/4799

www.securityfocus.com/archive/1/487686/100/200/threaded

www.securityfocus.com/archive/1/487697/100/200/threaded

www.securityfocus.com/bid/27654

www.vupen.com/english/advisories/2008/0473

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.9%

JSON

Related for CVE-2008-5692

prion1 nessus4 cvelist1 nvd1 openvas2