7.5

CVE-2004-1884

Exploit
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ipswitch ≫ Ws Ftp Pro Version 6.0
Ipswitch ≫ Ws Ftp Pro Version 7.5
Ipswitch ≫ Ws Ftp Pro Version 8.0_2
Ipswitch ≫ Ws Ftp Pro Version 8.0_3
Ipswitch ≫ Ws Ftp Server Version 3.0_1
Ipswitch ≫ Ws Ftp Server Version 4.01
Progress ≫ Ws Ftp Server Version 1.0.1
Progress ≫ Ws Ftp Server Version 1.0.2
Progress ≫ Ws Ftp Server Version 1.0.3
Progress ≫ Ws Ftp Server Version 1.0.4
Progress ≫ Ws Ftp Server Version 1.0.5
Progress ≫ Ws Ftp Server Version 2.0
Progress ≫ Ws Ftp Server Version 2.0.1
Progress ≫ Ws Ftp Server Version 2.0.2
Progress ≫ Ws Ftp Server Version 2.0.3
Progress ≫ Ws Ftp Server Version 2.0.4
Progress ≫ Ws Ftp Server Version 3.0
Progress ≫ Ws Ftp Server Version 3.1
Progress ≫ Ws Ftp Server Version 3.1.1
Progress ≫ Ws Ftp Server Version 3.1.2
Progress ≫ Ws Ftp Server Version 3.1.3
Progress ≫ Ws Ftp Server Version 3.4
Progress ≫ Ws Ftp Server Version 4.0
Progress ≫ Ws Ftp Server Version 4.0.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.81% 0.922
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=108006581418116&w=2
http://secunia.com/advisories/11206
Patch
Vendor Advisory
Exploit
http://www.securityfocus.com/bid/9953
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/15558