CVE-2020-8635: High severity Wftpserver Wing Ftp Server Linux vulnerability
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-8635?
CVE-2020-8635 is a vulnerability in Wing FTP Server v6.2.3 for Linux, macOS, and Solaris that allows local users to create FTP users with full privileges and escalate privileges within the operating system.
What is the severity of CVE-2020-8635?
The severity of CVE-2020-8635 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2020-8635?
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris is affected by CVE-2020-8635.
How can local users exploit CVE-2020-8635?
Local users can exploit CVE-2020-8635 by creating FTP users with full privileges and modifying system files.
Is there a fix available for CVE-2020-8635?
There is no information available regarding a fix for CVE-2020-8635. It is recommended to follow the vendor's instructions or contact them for further assistance.