It should be noted that version 6.2.5 was released on Februrary 27th, 2020, however, this bug was identified, reported, and patched on Februrary 28th, 2020. Exploitation is contingent on an already-established administrative session. You can also monitor server performance and online sessions and even receive email notifications about various events taking place on the server.ĭownload Link: Wing FTP Server Software Downloads Vulnerability - Unsafe Permissions on Session Cookies (CVE-2020-9470)Ī weakness in the handling of HTTP sessions within Wing FTP Server allows any local user to escalate privileges to root on Linux, MacOS, and Solaris. And it provides admins with a web-based interface to administrate the server from anywhere. It supports multiple file transfer protocols, including FTP, FTPS, HTTP, HTTPS, and SFTP, giving your clients flexibility in how they connect to the server. From the official website: Wing FTP Server is an easy-to-use, secure, and reliable FTP server software for Windows, Linux, Mac OS, and Solaris.

Download wing ftp server exploit github