CVE-2004-2674 Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
MediumCVSS 6.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft ftp server | <= 1.4.1.5 | No fix listed |
References
- 11002 patch third-party-advisory
- www.argosoft.com
- 11333 vdb-entry
- www.securiteam.com
- 9770 exploit patch vdb-entry
- argosoftftp-unzip-file-disclosure(15411) vdb-entry