Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability

Bugtraq ID:	50355
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 25 2011 12:00AM
Updated:	Oct 25 2011 12:00AM
Credit:	Reported by the vendor
Vulnerable:	wftpserver Wing FTP Server 3.8.8 wftpserver Wing FTP Server 3.8.6 wftpserver Wing FTP Server 3.6.1 wftpserver Wing FTP Server 3.6 wftpserver Wing FTP Server 3.5 wftpserver Wing FTP Server 3.4.3 wftpserver Wing FTP Server 3.4.1 wftpserver Wing FTP Server 3.4.1 wftpserver Wing FTP Server 3.4 wftpserver Wing FTP Server 3.2 wftpserver Wing FTP Server 3.1.2 wftpserver Wing FTP Server 3.1 wftpserver Wing FTP Server 3.0 wftpserver Wing FTP Server 3.8.7 wftpserver Wing FTP Server 3.8.5 wftpserver Wing FTP Server 3.8.0 wftpserver Wing FTP Server 3.6.6 wftpserver Wing FTP Server 2.4
Not Vulnerable:	wftpserver Wing FTP Server 4.0.1

Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability

Wing FTP Server is prone to an information-disclosure vulnerability.

Remote attackers can exploit this issue to gain access to sensitive information that may lead to further attacks.

Versions prior to Wing FTP Server 4.0.1 are vulnerable.

Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability

An attacker can use readily available utilties to exploit this issue.

Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability

References:

• Wing FTP Server Homepage (Wing FTP Server)