CVEvulnerability

CVE-2008-5693

5.0 MEDIUM Published 2008-12-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-12-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-20

Description

Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.

Affected configurations

• ipswitch ws ftp (<= 6.1) • ipswitch ws ftp 1.0.5 • ipswitch ws ftp 2.01 • ipswitch ws ftp 2.02 • ipswitch ws ftp 2.03 • ipswitch ws ftp 3.0 • ipswitch ws ftp 3.0.1 • ipswitch ws ftp 3.1.0 • ipswitch ws ftp 3.1.1 • ipswitch ws ftp 3.1.2 • ipswitch ws ftp 3.1.3 • ipswitch ws ftp 3.14 • ipswitch ws ftp 4.00 • ipswitch ws ftp 4.01 • ipswitch ws ftp 4.02 • ipswitch ws ftp 5.00 • ipswitch ws ftp 5.01 • ipswitch ws ftp 5.02 • ipswitch ws ftp 5.03 • ipswitch ws ftp 5.04 • ipswitch ws ftp 5.05 • ipswitch ws ftp 6.0

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References