CVE-2004-1884 Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
HighCVSS 7.5
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp pro | = 6.0 | No fix listed |
| ipswitch ws ftp pro | = 7.5 | No fix listed |
| ipswitch ws ftp pro | = 8.0_2 | No fix listed |
| ipswitch ws ftp pro | = 8.0_3 | No fix listed |
| ipswitch ws ftp server | = 3.0_1 | No fix listed |
| ipswitch ws ftp server | = 4.01 | No fix listed |
| progress ws ftp server | = 1.0.1 | No fix listed |
| progress ws ftp server | = 1.0.2 | No fix listed |
| progress ws ftp server | = 1.0.3 | No fix listed |
| progress ws ftp server | = 1.0.4 | No fix listed |
| progress ws ftp server | = 1.0.5 | No fix listed |
| progress ws ftp server | = 2.0 | No fix listed |
| progress ws ftp server | = 2.0.1 | No fix listed |
| progress ws ftp server | = 2.0.2 | No fix listed |
| progress ws ftp server | = 2.0.3 | No fix listed |
| progress ws ftp server | = 2.0.4 | No fix listed |
| progress ws ftp server | = 3.0 | No fix listed |
| progress ws ftp server | = 3.1 | No fix listed |
| progress ws ftp server | = 3.1.1 | No fix listed |
| progress ws ftp server | = 3.1.2 | No fix listed |
| progress ws ftp server | = 3.1.3 | No fix listed |
| progress ws ftp server | = 3.4 | No fix listed |
| progress ws ftp server | = 4.0 | No fix listed |
| progress ws ftp server | = 4.0.2 | No fix listed |
References
- 20040323 Open the WS_FTP Server backdoor to SYSTEM mailing-list
- 11206 exploit patch third-party-advisory vendor-advisory
- 9953 exploit vdb-entry vendor-advisory
- wftp-site-gain-priviliege(15558) vdb-entry