CVE-2008-5693
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ipswitch WS_FTP Server 一款高安全性、易于管理的文件传输服务器。 Ipswitch WS_FTP Server Manager 6.1.0.0 及其早期版本, 以及其他可能的Ipswitch产品, 可能允许远程攻击者借助一个具有附加点字符的请求，读取客户WSFTPSVR/中ASP文件内容。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-5693
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ipswitch WS_FTP Server Manager ASP文件信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ipswitch WS_FTP Server 一款高安全性、易于管理的文件传输服务器。 Ipswitch WS_FTP Server Manager 6.1.0.0 及其早期版本, 以及其他可能的Ipswitch产品, 可能允许远程攻击者借助一个具有附加点字符的请求，读取客户WSFTPSVR/中ASP文件内容。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-5693
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-5693
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-5693 (4)
Other References for CVE-2008-5693 (2)
-
http://aluigi.altervista.org/adv/wsftpweblog-adv.txt x_refsource_MISC
-
Same Patch Batch · n/a · 2008-12-19 · 26 CVEs total
| CVE-2008-5684 | Sun Solaris 'libICE' 未明 拒绝服务漏洞 | |
| CVE-2008-5683 | Opera Web 浏览器信息泄露漏洞 | |
| CVE-2008-5682 | Opera Web浏览器XSLT内嵌模板跨站攻击漏洞 | |
| CVE-2008-5681 | Opera Web浏览器9.63版本修复多个安全漏洞 | |
| CVE-2008-5680 | Opera Web 缓冲区溢出漏洞 | |
| CVE-2008-5679 | Opera Web Browser HTML Parsing 堆远程代码执行漏洞 | |
| CVE-2008-5691 | Phonecian Casina FlashAX Active控件缓冲区溢出漏洞 | |
| CVE-2008-5690 | Sun Solaris Kerberos本地拒绝服务漏洞 | |
| CVE-2008-5689 | Sun Solaris IP隧道参数空指针引用漏洞 | |
| CVE-2008-5688 | Mediawiki debugging敏感信息泄露漏洞 | |
| CVE-2008-5687 | mediawiki 权限许可和访问控制漏洞 | |
| CVE-2008-5686 | IBM Tivoli Provisioning Manager SOAP命令绕过认证漏洞 | |
| CVE-2008-5685 | Sun Fire Servers IP Spoofing 安全绕过漏洞 | |
| CVE-2008-5692 | Ipswitch WS_FTP Server Manager 权限绕过漏洞 | |
| CVE-2008-5252 | mediawiki 跨站请求伪造漏洞 | |
| CVE-2008-5250 | MediaWiki Wiki页跨站攻击漏洞 | |
| CVE-2008-5249 | MediaWiki 跨站脚本攻击河多个 HTML 注入漏洞 | |
| CVE-2008-5086 | libvirt Local 安全绕过漏洞 | |
| CVE-2008-5078 | GNU Enscript src/psgen.c栈溢出漏洞 | |
| CVE-2008-4122 | Joomla 会话设置cookie泄露漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-5693
No comments yet