CVE-2006-5000
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down...
CVE-2006-5000 is a medium vulnerability (CVSS 6.5) in Ipswitch Ws Ftp Server, published September 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 64.4%, the 99th percentile. No source names a fixed version.
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
- Record
CVE-2006-5000- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
- Record
CVE-2006-5000- Updated
- 2026-11-02
EUVDEUVD-2006-4986 No score
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
- Record
EUVD-2006-4986- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4q75-5h3x-cpf4 No score
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down...
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
- Record
GHSA-4q75-5h3x-cpf4- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
exchange.xforce.ibmcloud.com/vulnerabilities/41829
securityfocus.com/archive/1/447077/100/0/threaded
zerodayinitiative.com/advisories/ZDI-06-029.html
securitytracker.com/id?1016935
ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp
nvd.nist.gov/vuln/detail/CVE-2006-5000
github.com/advisories/GHSA-4q75-5h3x-cpf4