Ws Ftp Server

Vendor:

First CVE: Feb 2, 1999 · Active for 27 years

13

Total CVEs

More Total CVEs than 91% of tracked products

1.9

Avg CVEs / Year

Higher CVE frequency than 60% of tracked products

6.8

Avg CVSS

Higher Avg CVSS than 39% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ws Ftp Server over time

Volume of CVEsAvg CVSS Base Score

First CVE

Feb 2, 1999

27 years ago

Most Recent CVE

Jun 11, 2019

2,600 days ago

CVE Severity & Scoring

Ws Ftp Server13 CVEs

54%

31%

15%

All CVEs352,294 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local0 (0.0%)

Network3 (23.1%)

Unknown10 (76.9%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low3 (23.1%)

High0 (0.0%)

Unknown10 (76.9%)

User Interaction

None3 (23.1%)

Unknown10 (76.9%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None3 (23.1%)

Unknown10 (76.9%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2006-4847MEDIUM Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 comman	Sep 19, 2006	6.5	79	NO	YES
CVE-2003-0772HIGH Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STAT	Sep 22, 2003	7.5	74	NO	YES
CVE-2004-1135MEDIUM Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR co	Jan 10, 2005	5.0	57	NO	YES
CVE-2006-5000MEDIUM Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote authenticated attack vectors via the (1) XC	Sep 26, 2006	6.5	51	NO	NO
CVE-2019-12144CRITICAL An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a path traversal vulnerability using the SCP p	Jun 11, 2019	9.8	30	NO	NO
CVE-2019-12146CRITICAL A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. Attackers have the ability to abuse a flaw in the SCP listener	Jun 11, 2019	9.1	29	NO	NO
CVE-2006-4974HIGH Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.	Sep 25, 2006	7.5	29	NO	YES
CVE-2006-5001MEDIUM Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being disp	Sep 26, 2006	5.0	27	NO	NO
CVE-2019-12145HIGH A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the	Jun 11, 2019	7.5	25	NO	NO
CVE-2004-1848MEDIUM Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument	Dec 31, 2004	5.0	22	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

2 CVEs

15.4% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

30.8% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Ws Ftp Server

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
5.08_limited_edition	1	7.5	4.1%	1
5.05	1	6.5	63.8%	0
5.04	1	6.8	1.9%	0
5.03	4	5.8	57.6%	2
5.02	3	6.0	60.3%	1
4.01	4	6.6	46.0%	2
3.0_1	3	6.3	33.0%	1
1.0.2eval	2	5.8	43.6%	1
1.0.1eval	2	5.8	43.6%	1