CVEvulnerability
CVE-2006-5000
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Description
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
Affected configurations
• ipswitch ws ftp server 5.02
• ipswitch ws ftp server 5.03
• ipswitch ws ftp server 5.05
• progress ws ftp server 5.0.2
References
- http://securitytracker.com/id?1016935 securitytracker.com
- http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp Patch
- http://www.securityfocus.com/archive/1/447077/100/0/threaded www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-029.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41829 exchange.xforce.ibmcloud.com
- http://securitytracker.com/id?1016935 securitytracker.com
- http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp Patch
- http://www.securityfocus.com/archive/1/447077/100/0/threaded www.securityfocus.com
- http://www.zerodayinitiative.com/advisories/ZDI-06-029.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41829 exchange.xforce.ibmcloud.com