CVE-2020-8634

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 6.2.3

Description The issue allows files modified within the HTTP file management interface to be saved with world-readable and world-writable permissions. This could potentially enable a low-privilege user to escalate privileges to root if a sensitive system file were edited in this manner.

Recommendations For Wing FTP Server version 6.2.3, consider restricting access to sensitive system files and modifying the permissions manually after editing to prevent world-readable and world-writable access until a fix is available.