CVE-2008-5692: Medium severity Ipswitch WS FTP Server vulnerability

Q: What is the severity of CVE-2008-5692?

CVE-2008-5692 has been classified with a high severity score due to its capability to allow remote attackers to bypass authentication.

Q: How do I fix CVE-2008-5692?

To fix CVE-2008-5692, upgrade the Ipswitch WS_FTP Server Manager to version 6.1.1 or later.

Q: What products are affected by CVE-2008-5692?

CVE-2008-5692 affects various versions of Ipswitch WS_FTP, specifically versions prior to 6.1.1.

Q: Can CVE-2008-5692 allow access to sensitive logs?

Yes, CVE-2008-5692 allows attackers to read logs due to the authentication bypass vulnerability.

Q: What is the exploit method for CVE-2008-5692?

Attackers exploit CVE-2008-5692 by sending a logLogout action followed by a request to access LogViewer.asp.

Published Dec 19, 2008

Updated

Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.

Affected Software

22 affected components

Ipswitch WS FTP Server<=6.1

Ipswitch WS FTP Server=1.0.5

Ipswitch WS FTP Server=2.01

Ipswitch WS FTP Server=2.02

Ipswitch WS FTP Server=2.03

Ipswitch WS FTP Server=3.0

Ipswitch WS FTP Server=3.0.1

Ipswitch WS FTP Server=3.1.0

Ipswitch WS FTP Server=3.1.1

Ipswitch WS FTP Server=3.1.2

Ipswitch WS FTP Server=3.1.3

Ipswitch WS FTP Server=3.14

Ipswitch WS FTP Server=4.00

Ipswitch WS FTP Server=4.01

Ipswitch WS FTP Server=4.02

Ipswitch WS FTP Server=5.00

Ipswitch WS FTP Server=5.01

Ipswitch WS FTP Server=5.02

Ipswitch WS FTP Server=5.03

Ipswitch WS FTP Server=5.04

Ipswitch WS FTP Server=5.05

Ipswitch WS FTP Server=6.0

Event History

Dec 19, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-5692?

CVE-2008-5692 has been classified with a high severity score due to its capability to allow remote attackers to bypass authentication.

How do I fix CVE-2008-5692?

To fix CVE-2008-5692, upgrade the Ipswitch WS_FTP Server Manager to version 6.1.1 or later.

What products are affected by CVE-2008-5692?

CVE-2008-5692 affects various versions of Ipswitch WS_FTP, specifically versions prior to 6.1.1.

Can CVE-2008-5692 allow access to sensitive logs?

Yes, CVE-2008-5692 allows attackers to read logs due to the authentication bypass vulnerability.

What is the exploit method for CVE-2008-5692?