Wing.FTP.Server.Authenticated.Command.Execution

Description

This indicates an attack attempt to exploit a remote Code Injection vulnerability in Wing FTP Server 4.3.8.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application when handling a crafted HTTP request. A remote attacker could exploit this to execute arbitrary code execution within the context of the application, via a crafted HTTP request.

Affected Products

Wing FTP Server 4.3.8

Impact

System Compromise: Remote attackers can execute arbitrary code in the context of the affected application.

Recommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

References