Wing FTP Server Denial of Service Vulnerability and Information Disclosure Vulnerability

Bugtraq ID:	41987
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 27 2010 12:00AM
Updated:	Jul 27 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	wftpserver Wing FTP Server 3.6 wftpserver Wing FTP Server 3.5 wftpserver Wing FTP Server 3.4.3 wftpserver Wing FTP Server 3.4.1 wftpserver Wing FTP Server 3.4.1 wftpserver Wing FTP Server 3.4 wftpserver Wing FTP Server 3.2 wftpserver Wing FTP Server 3.1.2 wftpserver Wing FTP Server 3.1 wftpserver Wing FTP Server 3.0
Not Vulnerable:	wftpserver Wing FTP Server 3.6.1

Wing FTP Server Denial of Service Vulnerability and Information Disclosure Vulnerability

Wing FTP Server is prone to a denial-of-service vulnerability and an information-disclosure vulnerability.

Remote attackers can exploit this issue to gain access to sensitive information or crash the affected application; other attacks are also possible.

Versions prior to Wing FTP Server 3.6.1 are vulnerable.

Wing FTP Server Denial of Service Vulnerability and Information Disclosure Vulnerability

An attacker can exploit these issues by using readily available utilities.

Wing FTP Server Denial of Service Vulnerability and Information Disclosure Vulnerability

Solution:
The vendor released an update. Please see the references for more information.

Wing FTP Server Denial of Service Vulnerability and Information Disclosure Vulnerability

References:

• Wing FTP Server Homepage (Wing FTP Server)
  
• Wing FTP Server Release Notes (wftpserver)