CVEvulnerability
CVE-2004-2674
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:L/Au:S/C:C/I:N/A:N
Description
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
Affected configurations
• argosoft ftp server (<= 1.4.1.5)
References
- http://secunia.com/advisories/11002 Patch
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx www.argosoft.com
- http://www.osvdb.org/11333 www.osvdb.org
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html www.securiteam.com
- http://www.securityfocus.com/bid/9770 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15411 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11002 Patch
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx www.argosoft.com
- http://www.osvdb.org/11333 www.osvdb.org
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html www.securiteam.com
- http://www.securityfocus.com/bid/9770 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15411 exchange.xforce.ibmcloud.com