Details of VAR-200802-0410

ID

VAR-200802-0410

CVE

CVE-2008-0608

TITLE

IPSwitch WS_FTP of ftplogsrv.exe Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2008-004034

DESCRIPTION

The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823. IPSwitch WS_FTP of Logging Server (ftplogsrv.exe) There is a service disruption ( Loss of reactivity ) There is a vulnerability that becomes a condition. WS_FTP Log Server shipped with WS_FTP is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. This issue affects WS_FTP running FTP Log Server 7.9.14.0; other versions may also be affected. This vulnerability is different from CVE-2007-3823. ---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: Ipswitch WS_FTP Server FTP Log Server Denial of Service SECUNIA ADVISORY ID: SA28761 VERIFY ADVISORY: http://secunia.com/advisories/28761/ CRITICAL: Less critical IMPACT: DoS WHERE: >From local network SOFTWARE: WS_FTP Server 6.x http://secunia.com/product/14782/ DESCRIPTION: Luigi Auriemma has discovered a vulnerability in Ipswitch WS_FTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service). This can be exploited to cause the service to stop responding to further log requests by sending multiple overly large datagrams (over 4096 bytes) within a short period of time to port 5151/UDP. Other versions may also be affected. SOLUTION: Restrict access to port 5151/UDP. PROVIDED AND/OR DISCOVERED BY: Luigi Auriemma ORIGINAL ADVISORY: http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2008-0608 // JVNDB: JVNDB-2008-004034 // BID: 27612 // VULHUB: VHN-30733 // PACKETSTORM: 63287

AFFECTED PRODUCTS

vendor:	ipswitch	model:	ws ftp	scope:	eq	version:	6.1	Trust: 2.4
vendor:	ipswitch	model:	ws ftp server	scope:	eq	version:	6.1.0	Trust: 0.3
vendor:	ipswitch	model:	ws ftp server	scope:	eq	version:	6.0	Trust: 0.3
vendor:	ipswitch	model:	ftp log server	scope:	eq	version:	7.9.14.0	Trust: 0.3
vendor:	ipswitch	model:	ws ftp server	scope:	ne	version:	6.1.1	Trust: 0.3

sources: BID: 27612 // JVNDB: JVNDB-2008-004034 // CNNVD: CNNVD-200802-075 // NVD: CVE-2008-0608

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2008-0608
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2008-0608
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-200802-075
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-30733
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2008-0608
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-30733
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-30733 // JVNDB: JVNDB-2008-004034 // CNNVD: CNNVD-200802-075 // NVD: CVE-2008-0608

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-30733 // JVNDB: JVNDB-2008-004034 // NVD: CVE-2008-0608

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200802-075

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-200802-075

CONFIGURATIONS

sources: JVNDB: JVNDB-2008-004034

PATCH

title:

WS_FTP

url:

http://www.ipswitchft.com/

Trust: 0.8

sources: JVNDB: JVNDB-2008-004034

EXTERNAL IDS

db:	NVD	id:	CVE-2008-0608	Trust: 2.8
db:	BID	id:	27612	Trust: 2.0
db:	SECUNIA	id:	28761	Trust: 1.8
db:	VUPEN	id:	ADV-2008-0408	Trust: 1.7
db:	JVNDB	id:	JVNDB-2008-004034	Trust: 0.8
db:	BUGTRAQ	id:	20080204 SOCKET TERMINATION IN FTP LOG SERVER 7.9.14.0	Trust: 0.6
db:	CNNVD	id:	CNNVD-200802-075	Trust: 0.6
db:	VULHUB	id:	VHN-30733	Trust: 0.1
db:	PACKETSTORM	id:	63287	Trust: 0.1

sources: VULHUB: VHN-30733 // BID: 27612 // JVNDB: JVNDB-2008-004034 // PACKETSTORM: 63287 // CNNVD: CNNVD-200802-075 // NVD: CVE-2008-0608

REFERENCES

url:	http://aluigi.altervista.org/adv/ftplogsrvz-adv.txt	Trust: 1.8
url:	http://www.securityfocus.com/bid/27612	Trust: 1.7
url:	http://secunia.com/advisories/28761	Trust: 1.7
url:	http://www.securityfocus.com/archive/1/487506/100/0/threaded	Trust: 1.1
url:	http://www.vupen.com/english/advisories/2008/0408	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-0608	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-0608	Trust: 0.8
url:	http://www.frsirt.com/english/advisories/2008/0408	Trust: 0.6
url:	http://www.securityfocus.com/archive/1/archive/1/487506/100/0/threaded	Trust: 0.6
url:	http://www.ipswitch.com/products/ws_ftp/home/index.asp	Trust: 0.3
url:	/archive/1/487506	Trust: 0.3
url:	http://www.ipswitchft.com/support/ws_ftp_server/releases/wr611.asp	Trust: 0.3
url:	http://secunia.com/secunia_security_advisories/	Trust: 0.1
url:	https://psi.secunia.com/?page=changelog	Trust: 0.1
url:	https://psi.secunia.com/	Trust: 0.1
url:	http://secunia.com/product/14782/	Trust: 0.1
url:	http://secunia.com/advisories/28761/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/about_secunia_advisories/	Trust: 0.1

sources: VULHUB: VHN-30733 // BID: 27612 // JVNDB: JVNDB-2008-004034 // PACKETSTORM: 63287 // CNNVD: CNNVD-200802-075 // NVD: CVE-2008-0608

CREDITS

Luigi Auriemma discovered this vulnerability.

Trust: 0.3

sources: BID: 27612

SOURCES

db:	VULHUB	id:	VHN-30733
db:	BID	id:	27612
db:	JVNDB	id:	JVNDB-2008-004034
db:	PACKETSTORM	id:	63287
db:	CNNVD	id:	CNNVD-200802-075
db:	NVD	id:	CVE-2008-0608

LAST UPDATE DATE

2025-04-10T23:18:04.799000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-30733	date:	2018-10-15T00:00:00
db:	BID	id:	27612	date:	2015-05-07T17:33:00
db:	JVNDB	id:	JVNDB-2008-004034	date:	2012-09-25T00:00:00
db:	CNNVD	id:	CNNVD-200802-075	date:	2008-09-05T00:00:00
db:	NVD	id:	CVE-2008-0608	date:	2025-04-09T00:30:58.490

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-30733	date:	2008-02-06T00:00:00
db:	BID	id:	27612	date:	2008-02-04T00:00:00
db:	JVNDB	id:	JVNDB-2008-004034	date:	2012-09-25T00:00:00
db:	PACKETSTORM	id:	63287	date:	2008-02-05T23:02:25
db:	CNNVD	id:	CNNVD-200802-075	date:	2008-02-06T00:00:00
db:	NVD	id:	CVE-2008-0608	date:	2008-02-06T12:00:00