CVE-2006-4847

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 85.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-19 · updated 2026-06-16

Description

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Affected products

Ipswitch Ws Ftp Server: 1.0.1eval, 1.0.2eval, 3.0_1, 4.01, 5.02, 5.03
Progress Software Corporation WS_FTP Server: through 5.05; 1.0.1, 1.0.1.e, 1.0.2, 1.0.2.e, 1.0.3, 1.0.4 (+14)

References

http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
http://secunia.com/advisories/21932
http://www.osvdb.org/28939
http://www.securityfocus.com/bid/20076
http://www.vupen.com/english/advisories/2006/3655
https://exchange.xforce.ibmcloud.com/vulnerabilities/28983
http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
http://secunia.com/advisories/21932
http://www.osvdb.org/28939
http://www.securityfocus.com/bid/20076
http://www.vupen.com/english/advisories/2006/3655
https://exchange.xforce.ibmcloud.com/vulnerabilities/28983

Get alerted when CVE-2006-4847 or the next vulnerability affects your stack