CVE-2006-4847: Ipswitch WS_FTP Server

Medium severity, CVSS 6.5. EPSS: 85.3% chance of exploitation in the next 30 days.

Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.

Affected products

• Ipswitch WS_FTP Server: version 1.0.1eval only; version 1.0.2eval only; version 3.0_1 only; version 4.01 only; version 5.02 only; version 5.03 only
• Progress WS_FTP Server: up to and including 5.05; version 1.0.1 only; version 1.0.1.e only; version 1.0.2 only; version 1.0.2.e only; version 1.0.3 only; …

Published 2006-09-19. Last modified 2026-06-16.