CVE-2008-5692

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ipswitch:ws_ftp:4.02:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:4.01:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:*:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.05:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:4.00:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.01:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:2.02:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:2.01:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.00:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.03:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:2.03:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.0:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.02:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:5.04:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp:3.14:*:*:*:*:*:*:*

Information

Published : 2008-12-19 10:30

Updated : 2018-10-11 13:56


NVD link : CVE-2008-5692

Mitre link : CVE-2008-5692


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

ipswitch

  • ws_ftp