CVE-2006-5001: Medium severity Ipswitch Ws Ftp Server vulnerability

Q: What is the severity of CVE-2006-5001?

CVE-2006-5001 has a low severity rating as it pertains to information disclosure without immediate exploitation.

Q: How do I fix CVE-2006-5001?

To fix CVE-2006-5001, upgrade to WS_FTP Server version 5.05 Hotfix 1 or later.

Q: What versions are affected by CVE-2006-5001?

CVE-2006-5001 affects WS_FTP Server versions 5.0 through 5.05 prior to Hotfix 1.

Q: What type of information is affected by CVE-2006-5001?

CVE-2006-5001 may prevent certain sensitive information from displaying in the Files and Summary tabs.

Q: Is CVE-2006-5001 specific to a certain vendor or software?

Yes, CVE-2006-5001 specifically affects Ipswitch WS_FTP Server software.

Published Sep 26, 2006

Updated

Unspecified vulnerability in the log analyzer in WSFTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the (1) Files and (2) Summary tabs. NOTE: in the early publication of this identifier on 20060926, the description was used for the wrong issue.

Affected Software

6 affected components

Ipswitch Ws Ftp Server=5.02

Ipswitch Ws Ftp Server=5.03

Progress Ipswitch Ws Ftp Server=5.0.2

Progress Ipswitch Ws Ftp Server<=5.05

Progress Ws Ftp Server<=5.05

Progress Ws Ftp Server=5.0.2

Remediation

Patch Available

http://www.ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp

Event History

Sep 26, 2006

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-5001?

CVE-2006-5001 has a low severity rating as it pertains to information disclosure without immediate exploitation.

How do I fix CVE-2006-5001?