Signature Detail
Short Name |
SCAN:MISC:HTTP:WS-FTP-INI-ATMPT |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SCAN |
Keywords |
Windows Command ws_ftp.ini Access Attempt |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Windows Command ws_ftp.ini Access Attempt
This signature detects the string "ws_ftp.ini" within a URL request. WS_FTP, a popular Windows FTP server, has known vulnerabilities in its user:password hashes. This can indicate an attempt to gain unrestricted access to the FTP server.
Extended Description
WS_FTP, both Pro and LE versions,. allows passwords to be saved as part of a saved site configuration. These passwords are encrypted and stored in .ini files. The encryption method is weak and can be broken.
Affected Products
- Ipswitch WS_FTP LE 4.5.0
- Ipswitch WS_FTP LE 5.0.0
- Ipswitch WS_FTP Pro 6.0.0
References
- BugTraq: 547
- CVE: CVE-1999-1078