| Package | Affected versions | Patched versions |
|---|---|---|
| ws ftp | = 1.0.5= 2.01= 2.02= 2.03= 3.0= 3.0.1= 3.1.0= 3.1.1= 3.1.2= 3.1.3= 3.14= 4.00= 4.01= 4.02= 5.00= 5.01= 5.02= 5.03= 5.04= 5.05= 6.0≤ 6.1 |
Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free