CVE-2006-4847

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Published: Sep 19, 2006
Updated: Apr 13, 2023
CVE: CVE-2006-4847
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ipswitch / ws_ftp_server	5.02	5.02.x
ipswitch / ws_ftp_server	4.01	4.01.x
ipswitch / ws_ftp_server	3.0_1	3.0_1.x
ipswitch / ws_ftp_server	1.0.1eval	1.0.1eval.x
ipswitch / ws_ftp_server	5.03	5.03.x
ipswitch / ws_ftp_server	1.0.2eval	1.0.2eval.x
progress / ws_ftp_server	1.0.1	1.0.1.x
progress / ws_ftp_server	1.0.1.e	1.0.1.e.x
progress / ws_ftp_server	1.0.2	1.0.2.x
progress / ws_ftp_server	1.0.2.e	1.0.2.e.x
progress / ws_ftp_server	1.0.3	1.0.3.x
progress / ws_ftp_server	1.0.4	1.0.4.x
progress / ws_ftp_server	1.0.5	1.0.5.x
progress / ws_ftp_server	2.0	2.0.x
progress / ws_ftp_server	2.0.1	2.0.1.x
progress / ws_ftp_server	2.0.2	2.0.2.x
progress / ws_ftp_server	2.0.3	2.0.3.x
progress / ws_ftp_server	2.0.4	2.0.4.x
progress / ws_ftp_server	3.0	3.0.x
progress / ws_ftp_server	3.1	3.1.x
progress / ws_ftp_server	3.1.1	3.1.1.x
progress / ws_ftp_server	3.1.2	3.1.2.x
progress / ws_ftp_server	3.1.3	3.1.3.x
progress / ws_ftp_server	3.4	3.4.x
progress / ws_ftp_server	4.0	4.0.x
progress / ws_ftp_server	4.0.2	4.0.2.x
progress / ws_ftp_server	-	5.05.x

Vulnerability Database

289,697

CVE-2006-4847