CVE-2004-1884

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-1884
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=108006581418116&w=2
http://secunia.com/advisories/11206 Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/9953 Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15558
http://marc.info/?l=bugtraq&m=108006581418116&w=2
http://secunia.com/advisories/11206 Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/9953 Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15558
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ipswitch:ws_ftp_pro:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_pro:7.5:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_pro:8.0_2:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_pro:8.0_3:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_server:3.0_1:*:*:*:*:*:*:*
cpe:2.3:a:ipswitch:ws_ftp_server:4.01:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:2.0:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.1:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:3.4:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:4.0:*:*:*:*:*:*:*
cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*
History

20 Nov 2024, 23:51

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=108006581418116&w=2 - () http://marc.info/?l=bugtraq&m=108006581418116&w=2 -
References () http://secunia.com/advisories/11206 - Exploit, Patch, Vendor Advisory () http://secunia.com/advisories/11206 - Exploit, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/9953 - Exploit, Vendor Advisory () http://www.securityfocus.com/bid/9953 - Exploit, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/15558 -
Information

Published : 2004-03-23 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-1884

Mitre link : CVE-2004-1884

CVE.ORG link : CVE-2004-1884

JSON object : View

Products Affected

ipswitch

  • ws_ftp_server
  • ws_ftp_pro

progress

  • ws_ftp_server
CWE
NVD-CWE-Other