medium6.8
CVE-2004-2674
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via "..…
Impact
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Argosoft | Ftp Server | through 1.4.1.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11333
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15411
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11333
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15411