CVE-2008-5693
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might...
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
Exploit likelihood
What each source reports
NVD Score used
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
- Record
CVE-2008-5693- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
- Record
CVE-2008-5693- Updated
- 2026-11-02
EUVDEUVD-2008-5664 No score
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
- Record
EUVD-2008-5664- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29j4-w239-xhgq No score
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might...
Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.
- Record
GHSA-29j4-w239-xhgq- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5693 is a medium vulnerability (CVSS 5.0) in Ipswitch Ws Ftp, published December 19, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.54%, the 91st percentile. No source names a fixed version.
References
securityreason.com/securityalert/4799
aluigi.altervista.org/adv/wsftpweblog-adv.txt
securityfocus.com/bid/27654
exchange.xforce.ibmcloud.com/vulnerabilities/47677
nvd.nist.gov/vuln/detail/CVE-2008-5693
github.com/advisories/GHSA-29j4-w239-xhgq