Signature Detail
Short Name |
APP:IPSWITCH:WS-FTP-INFO-DISC |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
APP |
Keywords |
WS_FTP Server Manager Authentication Bypass and Information Disclosure |
Release Date |
2012/11/14 |
Update Number |
2203 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: WS_FTP Server Manager Authentication Bypass and Information Disclosure
This signature detects attempts to exploit a known vulnerability against Ipswitch WS_FTP Server Manager version 6.1.1 or earlier. A successful attack can lead to unauthorized information disclosure.
Extended Description
WS_FTP Server Manager is prone to an authentication-bypass vulnerability and an information-disclosure vulnerability. An attacker can exploit these issues to gain unauthorized access to the affected application and gain access to potentially sensitive information. These issues affect WS_FTP Server Manager 6.1.0.0; prior versions may also be affected.
Affected Products
- Ipswitch WS_FTP Server 6.0.0
- Ipswitch WS_FTP Server 6.1.0 .0
- Ipswitch WS_FTP Server Manager 6.1.0.0
References
- BugTraq: 27654
- CVE: CVE-2008-5692