CVE-2006-5000 Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3...
MediumCVSS 6.5
EPSS 64.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch ws ftp server | = 5.02 | No fix listed |
| ipswitch ws ftp server | = 5.03 | No fix listed |
| ipswitch ws ftp server | = 5.05 | No fix listed |
| progress ws ftp server | = 5.0.2 | No fix listed |
References
- 1016935 vdb-entry
- www.ipswitch.com patch
- 20060926 ZDI-06-029: Ipswitch WS_FTP Server Checksum Command Parsing Buffer Overflow Vulnerabilities mailing-list
- www.zerodayinitiative.com vendor-advisory
- wsftp-multiple-commands-bo(41829) vdb-entry