CVE-2004-1884 | Vulnerability Database | Aqua Security

Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.

Name	Vendor	Start Version	End Version
Ws_ftp_pro	Ipswitch	6.0 (including)	6.0 (including)
Ws_ftp_pro	Ipswitch	7.5 (including)	7.5 (including)
Ws_ftp_pro	Ipswitch	8.0_2 (including)	8.0_2 (including)
Ws_ftp_pro	Ipswitch	8.0_3 (including)	8.0_3 (including)
Ws_ftp_server	Ipswitch	3.0_1 (including)	3.0_1 (including)
Ws_ftp_server	Ipswitch	4.01 (including)	4.01 (including)
Ws_ftp_server	Progress	1.0.1 (including)	1.0.1 (including)
Ws_ftp_server	Progress	1.0.2 (including)	1.0.2 (including)
Ws_ftp_server	Progress	1.0.3 (including)	1.0.3 (including)
Ws_ftp_server	Progress	1.0.4 (including)	1.0.4 (including)
Ws_ftp_server	Progress	1.0.5 (including)	1.0.5 (including)
Ws_ftp_server	Progress	2.0 (including)	2.0 (including)
Ws_ftp_server	Progress	2.0.1 (including)	2.0.1 (including)
Ws_ftp_server	Progress	2.0.2 (including)	2.0.2 (including)
Ws_ftp_server	Progress	2.0.3 (including)	2.0.3 (including)
Ws_ftp_server	Progress	2.0.4 (including)	2.0.4 (including)
Ws_ftp_server	Progress	3.0 (including)	3.0 (including)
Ws_ftp_server	Progress	3.1 (including)	3.1 (including)
Ws_ftp_server	Progress	3.1.1 (including)	3.1.1 (including)
Ws_ftp_server	Progress	3.1.2 (including)	3.1.2 (including)
Ws_ftp_server	Progress	3.1.3 (including)	3.1.3 (including)
Ws_ftp_server	Progress	3.4 (including)	3.4 (including)
Ws_ftp_server	Progress	4.0 (including)	4.0 (including)
Ws_ftp_server	Progress	4.0.2 (including)	4.0.2 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-1884
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html