The server will also open these services once a 'domain' folder is created within $WINGFTP_DIR with a valid portlistener.xml file inside. If a service is already running on one of those ports, Wing FTP does not override that service. Once a domain is created within the administrative interface ( Wing FTP server opens services on TCP ports 21 (FTP), 990 (FTPS), 80 (HTTP), 443 (HTTPS), 22 (SSH). Ports will not open until the server is further configured. The installation directory hereon will be referred to as $WINGFTP_DIR. During installation, the software prompts the user to create an administrative user, an administrative password, choose which port the administrative HTTP interface should use (default 5466), then asks whether Wing FTP Server should start. Within the directory, run the wftpserver binary. To install the server, download the archive from the Wing FTP website and extract.

By default, the server sets unsafe permissions on system files, compromising the integrity of system settings and confidentiality of user password hashes.

Wing FTP Server sets an unsafe umask (permissions) for all files modified within the web interface.

Wing FTP Server follows symbolic links by default.

Three weaknesses were discovered in the software which make exploitation possible. You can also monitor server performance and online sessions and even receive email notifications about various events taking place on the server.ĭownload Link: Wing FTP Server Software Downloads Vulnerabilities - Unsafe UMask Set (CVE-2020-8634) and Unsafe Permissions on System Files (CVE-2020-8635)Ī number of weaknesses in Wing FTP Server allow any local user to escalate privileges to root on Linux, MacOS, and Solaris. And it provides admins with a web-based interface to administrate the server from anywhere.

It supports multiple file transfer protocols, including FTP, FTPS, HTTP, HTTPS, and SFTP, giving your clients flexibility in how they connect to the server.

From the official website: Wing FTP Server is an easy-to-use, secure, and reliable FTP server software for Windows, Linux, Mac OS, and Solaris.

Download wing ftp server rce