medium6.8Public exploit code
CVE-2004-2675
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities2004-02-27 · dos · windows · Verified
Impact
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Argosoft | Ftp Server | through 1.4.1.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11332
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15412
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11332
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15412