CVE-2006-5000: Ipswitch WS_FTP Server

Medium severity, CVSS 6.5. EPSS: 64.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.

Affected products

• Ipswitch WS_FTP Server: version 5.02 only; version 5.03 only; version 5.05 only
• Progress WS_FTP Server: version 5.0.2 only

Published 2006-09-26. Last modified 2026-06-16.