Wing FTP Server SSH Public Key Authentication Bypass

The remote FTP server is running a version of Wing FTP Server earlier than 3.8.8. As such, it is reportedly affected by an authentication bypass vulnerability when SSH public key authentication is used. An attacker can exploit this issue by logging into the FTP server with a password even though...

Wing FTP Server "ssh public key"身份验证安全绕过漏洞

BUGTRAQ ID: 48335 Wing FTP服务器是安全的多协议文件服务器FTP, HTTP, FTPS, HTTPS, SFTP，适用于Windows, Linux, Mac OSX和Solaris。 Wing FTP服务器在SSH身份验证的实现上存在安全漏洞，恶意用户可利用此漏洞绕过某些安全限制。 此漏洞源于SSH身份验证机制中的错误，在限制到仅公钥身份验证时，可不顾配置的限制使用密码登录 wftpserve Wing FTP Server 3.8.7 wftpserve Wing FTP Server 3.8.6 wftpserve Wing FTP Server 3.8....

Wing FTP Server LDAP Authentication Bypass

The remote FTP server is running a version of Wing FTP Server earlier than 3.8.7. As such, it reportedly is affected by an authentication bypass vulnerability when LDAP or Active Directory authentication is used. An attacker can exploit this issue by logging into the FTP server with an empty...

Wing FTP Server Detection

The remote host has an installation of Wing FTP server, which offers file transfer functionality over FTP, FTPS, and SFTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54955; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

Wing FTP Server < 3.6.6 HTTP Request DoS Vulnerability

Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wing FTP Server < 3.6.6 DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.6.6. Such versions reportedly fail to handle certain specially crafted HTTP requests. An attacker could exploit this issue to trigger a denial of service condition, and crash the remote service. C...

Wing FTP Server < 3.6.1 DoS and Information Disclosure Vulnerabilities

Wing FTP Server is prone to a denial of service DoS vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Wing FTP Server < 3.2.0 PORT Command DoS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.2.0. Such versions are reportedly affected by a denial of service vulnerability. By sending a specially crafted 'PORT' command with an invalid parameter, it may be possible for an attacker to crash the...

Wing FTP Server < 3.6.1 Multiple Flaws

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.6.1. Such versions are reportedly affected by multiple issues : - An unspecified issue in the SSH implementation could allow an authenticated attacker to trigger a denial of service condition. - An...

Wing FTP Server < 3.5.1 XSS

According to its banner, the remote host is running a version of Wing FTP Server earlier than 3.5.1. The web server included with such versions is affected by a cross-site scripting vulnerability. By sending a specially crafted 'POST' request to the admin web interface, an authenticated, remote...

CVE-2010-2428

Cross-site scripting XSS vulnerability in adminloginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted POST request...

CVE-2010-2428

CVE-2010-2428 affects Wing FTP Server for Windows 3.5.0 and earlier; the admin_loginok.html page is vulnerable to cross-site scripting via a crafted POST, allowing an authenticated remote attacker to inject arbitrary script/HTML in the user’s browser. Several sources (NVD, OpenVAS, Nessus) corrob...

Wing FTP Server DoS

Crash on PORT command parsing...

Wing FTP Server <= 3.1.2 'PORT' Command DoS Vulnerability

Wing FTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wing FTP Server PORT Command DoS Vulnerability

Discovery Date: Nov 14, 2009 Risk: Important Affected Software: Wing FTP Server 3.1.2 Description: There is a Denial of Service DoS vulnerability that exists in Wing FTP Server 3.1.2. The said vulnerability can be exploited by using an invalid parameter for PORT command. When exploited...

Wing FTP Server PORT命令远程拒绝服务漏洞

BUGTRAQ ID: 41015 Wing FTP server是安全的多协议文件服务器。 远程攻击者可以通过向Wing FTP Server提交带有无效参数的PORT命令导致服务器崩溃。 Wing FTP Server 3.1.2 厂商补丁： wftpserver.com -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.wftpserver.com/serverhistory.htm...

Wing FTP Server 3.5 admin_loginok.html页面HTML注入漏洞

BUGTRAQ: 40510 Wing FTP server的Administrator控制台（http://x.x.x.x:5466/adminloginok.html ）没有正确地过滤用户所提交请求中的参数，远程攻击者可以通过提交POST请求执行存储式跨站脚本攻击。 Wing FTP Server 3.5 厂商补丁： wftpserver.com -------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.wftpserver.com/index.htm...

Wing FTP Server 'admin_loginok.html' HTML Injection Vulnerability

Wing FTP Server is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie- based authentication credentials an...

Wing FTP Server crossite scripting

Crossite scripting in administration interface...

Wing FTP Server - Cross Site Scripting Vulnerability

Security Advisory: Wing FTP Server - Cross Site Scripting Vulnerability ======================================================== Discovered Date: May 31, 2010 System affected: Wing FTP Server for Windows, Version 3.5.0 and prior version Vulnerability Description: ================== Wing FTP serve...