NVD

Id
5434  
Name
CVE-2008-5692  
Description
Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-12-19  
Modified Date
2011-03-07  
Seq
2008-5692  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34018 5434 CVE-2008-5692 http://aluigi.altervista.org/adv/wsftpweblog-adv.txt  View
34019 5434 CVE-2008-5692 http://docs.ipswitch.com/WS_FTP_Server611/ReleaseNotes/index.htm?k_id=ipswitch_ftp_documents_worldwide_ws_ftpserverv611releasenotes#link12  View
34020 5434 CVE-2008-5692 4799  View
34021 5434 CVE-2008-5692 20080206 Logs visualization in WS_FTP Server Manager 6.1.0.0  View
34022 5434 CVE-2008-5692 20080206 Re: Logs visualization in WS_FTP Server Manager 6.1.0.0  View
34023 5434 CVE-2008-5692 27654  View
34024 5434 CVE-2008-5692 ADV-2008-0473  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49884 JVNDB-2008-005194 Ipswitch WS_FTP Server Manager におけるログを読まれる脆弱性 Ipswitch WS_FTP Server Manager には、認証を回避される、およびログを読まれる脆弱性が存在します。 CVE-2008-5692 35805 CVE-2008-5692 5434 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005194.html 2008-12-19 2012-09-25 View