PT-2006-5741 · Ipswitch · Ws Ftp Server

Published 2006-09-26 · Updated 2025-04-09 · CVE-2006-5000

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WS FTP Server versions 5.0 through 5.05 before Hotfix 1

Description Multiple buffer overflows have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands.

Recommendations For WS FTP Server versions 5.0 through 5.05, apply Hotfix 1 to resolve the issue. As a temporary workaround, consider restricting access to the XCRC, XMD5, and XSHA1 commands until a patch is available.

Fix

Related Identifiers

CVE-2006-5000

Affected Products

Ws Ftp Server

References · 9

• http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp · Patch
• http://zerodayinitiative.com/advisories/ZDI-06-029.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5000 · Security Note
• https://t.me/cvenotify/59276 · Telegram Post
• http://securitytracker.com/id?1016935 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5000 · Note
• https://t.me/cvenotify/118392 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41829 · Note
• http://securityfocus.com/archive/1/447077/100/0/threaded · Note