Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-8635. PoCs published by X1cT34m, Al1ex.
AI-analyzed exploit summary This Python script exploits CVE-2020-8635, a privilege escalation vulnerability in Wing FTP Server 6.2.3. It forges an FTP user account with full permissions via SSH access and then escalates privileges by editing /etc/shadow through the HTTP interface.
Description
Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and escalate privileges within the operating system by modifying system files.
Exploits (2)
This Python script exploits CVE-2020-8635, a privilege escalation vulnerability in Wing FTP Server 6.2.3. It forges an FTP user account with full permissions via SSH access and then escalates privileges by editing /etc/shadow through the HTTP interface.
This repository contains a functional Python exploit for CVE-2020-8635, which targets a privilege escalation vulnerability in Wing FTP Server 6.2.3. The exploit forges an FTP user account with full permissions via SSH access and then leverages the HTTP interface to escalate privileges.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H