Path Traversal in Wing WFTP Server leading to Remote Code Execution
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 8.2.6
- Public exploit
- None on Exploit-DB
Summary
Wing FTP Server, a file transfer server application, is affected by this vulnerability. An attacker with administrator access can use scripts to add user directories that escape the intended base folder, allowing them to write files anywhere on the system and potentially execute code with the privileges of the server process, which may be root if installed with sudo.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner privileges.Critically, since the installation guide mentions running the command with `sudo`, the files are created as “root.” This issue was fixed in version 8.2.6.
Affected versions
- Wing Soft Technology Wing FTP Server
fixed in 8.2.6