CVE-2006-4847

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2006-09-19

Last modified

2024-08-07

Affected products

• Ws Ftp Server (Ipswitch)
• Ws Ftp Server (Progress)

References

• http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
• http://secunia.com/advisories/21932
• http://www.osvdb.org/28939
• http://www.securityfocus.com/bid/20076
• http://www.vupen.com/english/advisories/2006/3655
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28983