CVE-2006-5000 - Depressible Beaver

Description

Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1 and possibly other versions down to 5.0 have unknown impact and remote authenticated attack vectors via the (1) XCRC (2) XMD5 and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926 the description was used for the wrong issue.

Reference

http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp http://www.zerodayinitiative.com/advisories/ZDI-06-029.html http://securitytracker.com/id?1016935 https://exchange.xforce.ibmcloud.com/vulnerabilities/41829 http://www.securityfocus.com/archive/1/447077/100/0/threaded