Login Request a demo
Unscored severity · published Sep 26, 2006
CVE-2006-5000
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1)…
–
CVSS
64.4%
EPSS
No
On KEV
Description
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
Exploitation
Is it being used?
Exploit prediction (EPSS)64.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
WS Ftp Server · Ipswitch
5.02; 5.03; 5.05 · source: NVD
Affected product
WF
WS Ftp Server
Ipswitch
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5000
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5000
securitytracker.com
http://securitytracker.com/id?1016935
Patch
http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
www.securityfocus.com
http://www.securityfocus.com/archive/1/447077/100/0/threaded
Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-06-029.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41829
More from WS Ftp Server
9.8
CVE-2019-12144
An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
9.1
CVE-2019-12146
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
7.5
CVE-2019-12145
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1
–
CVE-2007-0666
Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3)…
–
CVE-2006-5001
Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being…