Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ws_ftp_pro | Ipswitch | 6.0 (including) | 6.0 (including) |
| Ws_ftp_pro | Ipswitch | 7.5 (including) | 7.5 (including) |
| Ws_ftp_pro | Ipswitch | 8.0_2 (including) | 8.0_2 (including) |
| Ws_ftp_pro | Ipswitch | 8.0_3 (including) | 8.0_3 (including) |
| Ws_ftp_server | Ipswitch | 3.0_1 (including) | 3.0_1 (including) |
| Ws_ftp_server | Ipswitch | 4.01 (including) | 4.01 (including) |
| Ws_ftp_server | Progress | 1.0.1 (including) | 1.0.1 (including) |
| Ws_ftp_server | Progress | 1.0.2 (including) | 1.0.2 (including) |
| Ws_ftp_server | Progress | 1.0.3 (including) | 1.0.3 (including) |
| Ws_ftp_server | Progress | 1.0.4 (including) | 1.0.4 (including) |
| Ws_ftp_server | Progress | 1.0.5 (including) | 1.0.5 (including) |
| Ws_ftp_server | Progress | 2.0 (including) | 2.0 (including) |
| Ws_ftp_server | Progress | 2.0.1 (including) | 2.0.1 (including) |
| Ws_ftp_server | Progress | 2.0.2 (including) | 2.0.2 (including) |
| Ws_ftp_server | Progress | 2.0.3 (including) | 2.0.3 (including) |
| Ws_ftp_server | Progress | 2.0.4 (including) | 2.0.4 (including) |
| Ws_ftp_server | Progress | 3.0 (including) | 3.0 (including) |
| Ws_ftp_server | Progress | 3.1 (including) | 3.1 (including) |
| Ws_ftp_server | Progress | 3.1.1 (including) | 3.1.1 (including) |
| Ws_ftp_server | Progress | 3.1.2 (including) | 3.1.2 (including) |
| Ws_ftp_server | Progress | 3.1.3 (including) | 3.1.3 (including) |
| Ws_ftp_server | Progress | 3.4 (including) | 3.4 (including) |
| Ws_ftp_server | Progress | 4.0 (including) | 4.0 (including) |
| Ws_ftp_server | Progress | 4.0.2 (including) | 4.0.2 (including) |