6.5

CVE-2006-5000

EPSS 8.63%
Veröffentlicht 26.09.2006 20:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands.  NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ipswitch ≫ Ws Ftp Server Version5.02

Ipswitch ≫ Ws Ftp Server Version5.03

Ipswitch ≫ Ws Ftp Server Version5.05

Progress ≫ Ws Ftp Server Version5.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.63%	0.921

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

http://securitytracker.com/id?1016935

http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp

Patch

http://www.securityfocus.com/archive/1/447077/100/0/threaded

http://www.zerodayinitiative.com/advisories/ZDI-06-029.html

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41829

https://nvd.nist.gov/vuln/detail/CVE-2006-5000

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5000

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5000

EUVD