Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.

According to its banner, the remote host is running a version of WS_FTP earlier than 6.1.1.  Such versions are reportedly affected by multiple vulnerabilities :

  - Improper handling of UDP packets within the FTP log     server may allow an attacker to crash the affected     service. (CVE-2008-0608)

  - There is a buffer overflow vulnerability in the SSH     Server service that can be triggered when handling     arguments to the 'opendir' command. (CVE-2008-0590)

  - An attacker can exploit a vulnerability in the     'FTPLogServer/LogViewer.asp' script to gain access to     the log viewing interface. (CVE-2008-5692)

The remote host is running a version of WS_FTP earlier than 6.1.1.
Such versions are reportedly affected by multiple vulnerabilities :

  - Improper handling of UDP packets within the FTP log     server may allow an attacker to crash the affected     service. (CVE-2008-0608)

  - There is a buffer overflow vulnerability in the SSH     Server service that can be triggered when handling     arguments to the 'opendir' command. (CVE-2008-0590)

  - An attacker can exploit a vulnerability in the     'FTPLogServer/LogViewer.asp' script to gain access to     the log viewing interface. (CVE-2008-5692)

This host is running a vulnerable version of WS_FTP FTP server. Versions up to and including 6.1.0 are reported prone to multiple flaws:

 - A vulnerability caused by an improper handling of UDP packets within the FTP log server.  An attacker can exploit this to crash the affected service. (CVE-2008-0608)

 - A buffer overflow vulnerability in the SSH server service when handling arguments to the 'opendir' command. (CVE-2008-0590)

 - An information disclosure vulnerability when processing HTTP requests for the 'FTPLogServer/LogViewer.asp' script.  An attacker can exploit this to gain access to the log viewing interface. (CVE-2008-5692)

ID	Name	Product	Family	Severity
40772	Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities (uncredentialed check)	Nessus	FTP	high
40771	Ipswitch WS_FTP Server < 6.1.1 Multiple Vulnerabilities	Nessus	FTP	high
4361	WS_FTP Server < 6.1.1 Multiple Vulnerabilities	Nessus Network Monitor	FTP Servers	high

Detections

Analytics

CVE-2008-5693

critical

Tenable Plugins

high

high

high