var-200802-0410
Vulnerability from variot
The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823. IPSwitch WS_FTP of Logging Server (ftplogsrv.exe) There is a service disruption ( Loss of reactivity ) There is a vulnerability that becomes a condition. WS_FTP Log Server shipped with WS_FTP is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. This issue affects WS_FTP running FTP Log Server 7.9.14.0; other versions may also be affected. This vulnerability is different from CVE-2007-3823.
A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched.
Download and test it today: https://psi.secunia.com/
Read more about this new version: https://psi.secunia.com/?page=changelog
TITLE: Ipswitch WS_FTP Server FTP Log Server Denial of Service
SECUNIA ADVISORY ID: SA28761
VERIFY ADVISORY: http://secunia.com/advisories/28761/
CRITICAL: Less critical
IMPACT: DoS
WHERE:
From local network
SOFTWARE: WS_FTP Server 6.x http://secunia.com/product/14782/
DESCRIPTION: Luigi Auriemma has discovered a vulnerability in Ipswitch WS_FTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service). This can be exploited to cause the service to stop responding to further log requests by sending multiple overly large datagrams (over 4096 bytes) within a short period of time to port 5151/UDP. Other versions may also be affected.
SOLUTION: Restrict access to port 5151/UDP.
PROVIDED AND/OR DISCOVERED BY: Luigi Auriemma
ORIGINAL ADVISORY: http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "ws ftp",
"scope": "eq",
"trust": 2.4,
"vendor": "ipswitch",
"version": "6.1"
},
{
"_id": null,
"model": "ws ftp server",
"scope": "eq",
"trust": 0.3,
"vendor": "ipswitch",
"version": "6.1.0"
},
{
"_id": null,
"model": "ws ftp server",
"scope": "eq",
"trust": 0.3,
"vendor": "ipswitch",
"version": "6.0"
},
{
"_id": null,
"model": "ftp log server",
"scope": "eq",
"trust": 0.3,
"vendor": "ipswitch",
"version": "7.9.14.0"
},
{
"_id": null,
"model": "ws ftp server",
"scope": "ne",
"trust": 0.3,
"vendor": "ipswitch",
"version": "6.1.1"
}
],
"sources": [
{
"db": "BID",
"id": "27612"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
},
{
"db": "NVD",
"id": "CVE-2008-0608"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:ipswitch:ws_ftp",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
}
]
},
"credits": {
"_id": null,
"data": "Luigi Auriemma discovered this vulnerability.",
"sources": [
{
"db": "BID",
"id": "27612"
}
],
"trust": 0.3
},
"cve": "CVE-2008-0608",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2008-0608",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-30733",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2008-0608",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2008-0608",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200802-075",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-30733",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-30733"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
},
{
"db": "NVD",
"id": "CVE-2008-0608"
}
]
},
"description": {
"_id": null,
"data": "The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823. IPSwitch WS_FTP of Logging Server (ftplogsrv.exe) There is a service disruption ( Loss of reactivity ) There is a vulnerability that becomes a condition. WS_FTP Log Server shipped with WS_FTP is prone to a remote denial-of-service vulnerability. \nSuccessfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. \nThis issue affects WS_FTP running FTP Log Server 7.9.14.0; other versions may also be affected. This vulnerability is different from CVE-2007-3823. \n\n----------------------------------------------------------------------\n\nA new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI\nhas been released. The new version includes many new and advanced\nfeatures, which makes it even easier to stay patched. \n\nDownload and test it today:\nhttps://psi.secunia.com/\n\nRead more about this new version:\nhttps://psi.secunia.com/?page=changelog\n\n----------------------------------------------------------------------\n\nTITLE:\nIpswitch WS_FTP Server FTP Log Server Denial of Service\n\nSECUNIA ADVISORY ID:\nSA28761\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/28761/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nDoS\n\nWHERE:\n\u003eFrom local network\n\nSOFTWARE:\nWS_FTP Server 6.x\nhttp://secunia.com/product/14782/\n\nDESCRIPTION:\nLuigi Auriemma has discovered a vulnerability in Ipswitch WS_FTP\nServer, which can be exploited by malicious people to cause a DoS\n(Denial of Service). This can be exploited to cause the\nservice to stop responding to further log requests by sending multiple\noverly large datagrams (over 4096 bytes) within a short period of time\nto port 5151/UDP. Other versions may\nalso be affected. \n\nSOLUTION:\nRestrict access to port 5151/UDP. \n\nPROVIDED AND/OR DISCOVERED BY:\nLuigi Auriemma\n\nORIGINAL ADVISORY:\nhttp://aluigi.altervista.org/adv/ftplogsrvz-adv.txt\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2008-0608"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "BID",
"id": "27612"
},
{
"db": "VULHUB",
"id": "VHN-30733"
},
{
"db": "PACKETSTORM",
"id": "63287"
}
],
"trust": 2.07
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2008-0608",
"trust": 2.8
},
{
"db": "BID",
"id": "27612",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "28761",
"trust": 1.8
},
{
"db": "VUPEN",
"id": "ADV-2008-0408",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034",
"trust": 0.8
},
{
"db": "BUGTRAQ",
"id": "20080204 SOCKET TERMINATION IN FTP LOG SERVER 7.9.14.0",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-30733",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "63287",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-30733"
},
{
"db": "BID",
"id": "27612"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "PACKETSTORM",
"id": "63287"
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
},
{
"db": "NVD",
"id": "CVE-2008-0608"
}
]
},
"id": "VAR-200802-0410",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-30733"
}
],
"trust": 0.01
},
"last_update_date": "2024-11-23T22:19:35.709000Z",
"patch": {
"_id": null,
"data": [
{
"title": "WS_FTP",
"trust": 0.8,
"url": "http://www.ipswitchft.com/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-30733"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "NVD",
"id": "CVE-2008-0608"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 1.8,
"url": "http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/27612"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/28761"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/487506/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2008/0408"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-0608"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-0608"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2008/0408"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/487506/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.ipswitch.com/products/ws_ftp/home/index.asp"
},
{
"trust": 0.3,
"url": "/archive/1/487506"
},
{
"trust": 0.3,
"url": "http://www.ipswitchft.com/support/ws_ftp_server/releases/wr611.asp"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "https://psi.secunia.com/?page=changelog"
},
{
"trust": 0.1,
"url": "https://psi.secunia.com/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/14782/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/28761/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-30733"
},
{
"db": "BID",
"id": "27612"
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
},
{
"db": "PACKETSTORM",
"id": "63287"
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
},
{
"db": "NVD",
"id": "CVE-2008-0608"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "VULHUB",
"id": "VHN-30733",
"ident": null
},
{
"db": "BID",
"id": "27612",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2008-004034",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "63287",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-200802-075",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2008-0608",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2008-02-06T00:00:00",
"db": "VULHUB",
"id": "VHN-30733",
"ident": null
},
{
"date": "2008-02-04T00:00:00",
"db": "BID",
"id": "27612",
"ident": null
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-004034",
"ident": null
},
{
"date": "2008-02-05T23:02:25",
"db": "PACKETSTORM",
"id": "63287",
"ident": null
},
{
"date": "2008-02-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200802-075",
"ident": null
},
{
"date": "2008-02-06T12:00:00",
"db": "NVD",
"id": "CVE-2008-0608",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2018-10-15T00:00:00",
"db": "VULHUB",
"id": "VHN-30733",
"ident": null
},
{
"date": "2015-05-07T17:33:00",
"db": "BID",
"id": "27612",
"ident": null
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2008-004034",
"ident": null
},
{
"date": "2008-09-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200802-075",
"ident": null
},
{
"date": "2024-11-21T00:42:29.873000",
"db": "NVD",
"id": "CVE-2008-0608",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "IPSwitch WS_FTP of ftplogsrv.exe Service disruption in (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2008-004034"
}
],
"trust": 0.8
},
"type": {
"_id": null,
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200802-075"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…