SCAN: Windows Command ws_ftp.ini Access Attempt
This signature detects the string "ws_ftp.ini" within a URL request. WS_FTP, a popular Windows FTP server, has known vulnerabilities in its user:password hashes. This can indicate an attempt to gain unrestricted access to the FTP server.
Extended Description
WS_FTP, both Pro and LE versions,. allows passwords to be saved as part of a saved site configuration. These passwords are encrypted and stored in .ini files. The encryption method is weak and can be broken.
Affected Products
Ipswitch ws_ftp_le
Short Name
SCAN:MISC:HTTP:WS-FTP-INI-ATMPT
Severity
Info
Recommended
False
Recommended Action
None
Category
SCAN
Keywords
Access Attempt CVE-1999-1078 Command Windows bid:547 ws_ftp.ini
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Rarely
Vendors
Ipswitch
CVSS Score
7.5