Published: 19/09/2006 Updated: 11/10/2023

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

VMScore: 660

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ipswitch ws ftp server 5.02
ipswitch ws ftp server 4.01
ipswitch ws ftp server 3.0_1
ipswitch ws ftp server 1.0.1eval
ipswitch ws ftp server 5.03
ipswitch ws ftp server 1.0.2eval
progress ws ftp server 1.0.1
progress ws ftp server 1.0.1.e
progress ws ftp server 1.0.2
progress ws ftp server 1.0.2.e
progress ws ftp server 1.0.3
progress ws ftp server 1.0.4
progress ws ftp server 1.0.5
progress ws ftp server 2.0
progress ws ftp server 2.0.1
progress ws ftp server 2.0.2
progress ws ftp server 2.0.3
progress ws ftp server 2.0.4
progress ws ftp server 3.0
progress ws ftp server 3.1
progress ws ftp server 3.1.1
progress ws ftp server 3.1.2
progress ws ftp server 3.1.3
progress ws ftp server 3.4
progress ws ftp server 4.0
progress ws ftp server 4.0.2
progress ws ftp server

## # $Id: wsftp_server_505_xmd5rb 9179 2010-04-30 08:40:19Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

## # This file is part of the Metasploit Framework and may be redistributed # according to the licenses defined in the Authors field below In the # case of an unknown or missing license, this file defaults to the same # license as the core Framework (dual GPLv2 and Artistic) The latest # version of the Framework can always be obtained from metas ...

NVD-CWE-Other http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp http://secunia.com/advisories/21932 http://www.securityfocus.com/bid/20076 http://www.osvdb.org/28939 http://www.vupen.com/english/advisories/2006/3655 https://exchange.xforce.ibmcloud.com/vulnerabilities/28983 https://nvd.nist.gov https://www.exploit-db.com/exploits/16717/

CVE-2006-4847

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect