CVE-2006-5000

Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://securitytracker.com/id?1016935
http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp	Patch
http://www.securityfocus.com/archive/1/447077/100/0/threaded
http://www.zerodayinitiative.com/advisories/ZDI-06-029.html	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41829

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ipswitch:ws_ftp_server:5.02:::::::*
	cpe:2.3:a:ipswitch:ws_ftp_server:5.03:::::::*
	cpe:2.3:a:ipswitch:ws_ftp_server:5.05:::::::*
	cpe:2.3:a:progress:ws_ftp_server:5.0.2:::::::*

History

No history.

Information

Published : 2006-09-26 20:07

Updated : 2023-10-11 14:45

NVD link : CVE-2006-5000

Mitre link : CVE-2006-5000

CVE.ORG link : CVE-2006-5000

JSON object : View

Products Affected

progress

ws_ftp_server

ipswitch

ws_ftp_server

CWE

NVD-CWE-Other

{"id": "CVE-2006-5000", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2006-09-26T20:07:00.000", "references": [{"url": "http://securitytracker.com/id?1016935", "source": "cve@mitre.org"}, {"url": "http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/447077/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-06-029.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41829", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en WS_FTP Server 5.05 anterior a Hotfix 1, y posiblemente otras versiones anteriores a la 5.0, tienen impacto y vectores de ataque remotos autenticados desconocidos mediante los comandos (1) XCRC, (2) XMD5, y (3) XSHA1. NOTA: en la publicaci\u00f3n anterior de este identificador en 26/09/2006, la descripci\u00f3n fue usada por el asunto equivocado."}], "lastModified": "2023-10-11T14:45:44.747", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ipswitch:ws_ftp_server:5.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E0A22A5-FBBB-4B7D-A64D-8F021B60181F"}, {"criteria": "cpe:2.3:a:ipswitch:ws_ftp_server:5.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA85C3EF-DAD2-4383-9E97-65B4D77A73E9"}, {"criteria": "cpe:2.3:a:ipswitch:ws_ftp_server:5.05:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C708EB23-580C-4925-BBD8-ED4C8A69A688"}, {"criteria": "cpe:2.3:a:progress:ws_ftp_server:5.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED4F7DAA-DB7C-4CCC-9521-131FEFC776FD"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}