What’s Vulnerable › Vulnerabilities

CVE-2006-5000

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 64.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-09-26 · updated 2026-06-16

Description

Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.

Affected products

• Ipswitch Ws Ftp Server: 5.02, 5.03, 5.05
• Progress Software Corporation WS_FTP Server: 5.0.2

References

• http://securitytracker.com/id?1016935
• http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
• http://www.securityfocus.com/archive/1/447077/100/0/threaded
• http://www.zerodayinitiative.com/advisories/ZDI-06-029.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41829
• http://securitytracker.com/id?1016935
• http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
• http://www.securityfocus.com/archive/1/447077/100/0/threaded
• http://www.zerodayinitiative.com/advisories/ZDI-06-029.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41829

Get alerted when CVE-2006-5000 or the next vulnerability affects your stack