CVE-2008-5692

medium · 5

Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.

CVSS

12.6%

EPSS (exploit prob.)

96th

EPSS percentile

2008-12-19

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
ipswitch	ws_ftp	<= 6.1
ipswitch	ws_ftp	1.0.5
ipswitch	ws_ftp	2.01
ipswitch	ws_ftp	2.02
ipswitch	ws_ftp	2.03
ipswitch	ws_ftp	3.0
ipswitch	ws_ftp	3.0.1
ipswitch	ws_ftp	3.1.0
ipswitch	ws_ftp	3.1.1
ipswitch	ws_ftp	3.1.2
ipswitch	ws_ftp	3.1.3
ipswitch	ws_ftp	3.14
ipswitch	ws_ftp	4.00
ipswitch	ws_ftp	4.01
ipswitch	ws_ftp	4.02
ipswitch	ws_ftp	5.00
ipswitch	ws_ftp	5.01
ipswitch	ws_ftp	5.02
ipswitch	ws_ftp	5.03
ipswitch	ws_ftp	5.04
ipswitch	ws_ftp	5.05
ipswitch	ws_ftp	6.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-5692