Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-5000

EPSS 5.88% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-5000

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XCRC, (2) XMD5, and (3) XSHA1 commands. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ipswitch WS_FTP Server 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ipswitch WS_FTP Server是一款适用于Windows系统的FTP服务程序。 Ipswitch WS_FTP Server在处理多个扩展命令的参数时存在缓冲区溢出漏洞，远程攻击者可以利用这个漏洞进行缓冲区溢出以SYSTEM权限执行任意指令。 WS_FTP在处理超长的XCRC/XSHA1/XMD5扩展命令参数时存在典型的栈溢出漏洞，远程攻击者可以通过溢出攻击在服务器上执行任意指令，漏洞的利用需要用户以合法的帐号登录到系统，但无须有可写的目录。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-5000

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-5000

Please Login to view more intelligence information

Same Patch Batch · n/a · 2006-09-26 · 20 CVEs total

CVE-2006-4987Patrick Michaelis Wili-CMS 多个PHP远程文件包含漏洞
CVE-2006-4996Joomla!的JoomlaLib 未明漏洞
CVE-2006-4995Joomla!的BSQ Sitestats 'mosConfig_absolute_path'参数PHP远程文件包含漏洞
CVE-2006-4994Apache Friends XAMPP 搜索路径漏洞
CVE-2006-4993AllMyGuests SignIn.PHP远程文件包含漏洞
CVE-2006-4992JD-WordPress for Joomla! (com_jd-wp) 多个PHP远程文件包含漏洞
CVE-2006-4991RSA Keon CA日志文件验证绕过漏洞
CVE-2006-4990PhotoPost 多个PHP远程文件包含漏洞
CVE-2006-4989Wili-CMS 多个信息泄露漏洞漏洞
CVE-2006-4988Patrick Michaelis Wili-CMS 多个跨站脚本攻击漏洞
CVE-2006-5001WS_FTP Server 敏感信息泄露漏洞
CVE-2006-4986Grayscale BandSite CMS 多个输入验证漏洞
CVE-2006-4985Grayscale BandSite CMS多个跨站脚本攻击漏洞
CVE-2006-4984Grayscale BandSite CMS 多个PHP远程文件包含漏洞
CVE-2006-4983Cisco NAC 绕过控制漏洞
CVE-2006-4982Cisco NAC绕过控制漏洞
CVE-2006-4981Symantec Sygate NAC 绕过控制漏洞
CVE-2006-4178FreeBSD I386_Set_LDT()多个本地拒绝服务漏洞
CVE-2006-4172FreeBSD I386_Set_LDT()多个本地拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-5000

No comments yet

Leave a comment