CVE-2005-0520 ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft ftp server | = 1.4.1.1 | No fix listed |
| argosoft ftp server | = 1.4.1.2 | No fix listed |
| argosoft ftp server | = 1.4.1.3 | No fix listed |
| argosoft ftp server | = 1.4.1.4 | No fix listed |
| argosoft ftp server | = 1.4.1.5 | No fix listed |
| argosoft ftp server | = 1.4.1.6 | No fix listed |
| argosoft ftp server | = 1.4.1.7 | No fix listed |
| argosoft ftp server | = 1.4.1.8 | No fix listed |
| argosoft ftp server | = 1.4.1.9 | No fix listed |
| argosoft ftp server | = 1.4.2 | No fix listed |
| argosoft ftp server | = 1.4.2.1 | No fix listed |
| argosoft ftp server | = 1.4.2.2 | No fix listed |
References
- 14372 patch third-party-advisory vendor-advisory
- www.argosoft.com patch vendor-advisory
- 14061 vdb-entry
- 12632 vdb-entry
- argosoft-site-copy-files(19442) vdb-entry