← Vulnerability feed

Vulnerability record · CVE-1999-1078 · published 29 July 1999

CVE-1999-1078: Ipswitch ws ftp pro vulnerability

Ipswitch · Ws Ftp Pro

WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.

7.5 CVSS 2.0 High EPSS 1.8% · top 22.3%
7.5CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P Vendor Advisory
http://www.securityfocus.com/bid/547
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9907&L=ntbugtraq&D=0&P=10370&F=P Vendor Advisory
http://www.securityfocus.com/bid/547

Track CVE-1999-1078 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-3734Ipswitch ws ftp home vulnerabilityFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of serv…EPSS 14%7.5CVE-2007-0330Ipswitch ws ftp pro vulnerabilityBuffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (…EPSS 3.4%7.5CVE-2004-1884Ipswitch ws ftp pro vulnerabilityIpswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.EPSS 5.8%7.5CVE-2002-1851Ipswitch ws ftp pro vulnerabilityBuffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.EPSS 3.4%6.8CVE-2007-0665Ipswitch ws ftp pro vulnerabilityFormat string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via for…EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-1999-1078), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.