CVEvulnerability

CVE-2005-0519

10.0 HIGH Published 2005-02-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.

Affected configurations

• argosoft ftp server 1.4.1.1 • argosoft ftp server 1.4.1.2 • argosoft ftp server 1.4.1.3 • argosoft ftp server 1.4.1.4 • argosoft ftp server 1.4.1.5 • argosoft ftp server 1.4.1.6 • argosoft ftp server 1.4.1.7 • argosoft ftp server 1.4.1.8 • argosoft ftp server 1.4.1.9 • argosoft ftp server 1.4.2 • argosoft ftp server 1.4.2.1 • argosoft ftp server 1.4.2.2

References