Description
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
References
- 4799 third-party-advisory
- http://aluigi.altervista.org/adv/wsftpweblog-adv.txt
- 27654 vdb-entry
- 20080206 Re: Logs visualization in WS_FTP Server Manager 6.1.0.0 mailing-list
- 20080206 Logs visualization in WS_FTP Server Manager 6.1.0.0 mailing-list
- wsftpserver-wsftpsvr-info-disclosure(47677) vdb-entry