CVE-2006-2170 Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.
MediumCVSS 6.4
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| argosoft ftp server | = 1.4.1.1 | No fix listed |
| argosoft ftp server | = 1.4.1.2 | No fix listed |
| argosoft ftp server | = 1.4.1.3 | No fix listed |
| argosoft ftp server | = 1.4.1.4 | No fix listed |
| argosoft ftp server | = 1.4.1.5 | No fix listed |
| argosoft ftp server | = 1.4.1.6 | No fix listed |
| argosoft ftp server | = 1.4.1.7 | No fix listed |
| argosoft ftp server | = 1.4.1.8 | No fix listed |
| argosoft ftp server | = 1.4.1.9 | No fix listed |
| argosoft ftp server | = 1.4.2 | No fix listed |
| argosoft ftp server | = 1.4.2.1 | No fix listed |
| argosoft ftp server | = 1.4.2.2 | No fix listed |
| argosoft ftp server | = 1.4.2.7 | No fix listed |
| argosoft ftp server | = 1.4.2.8 | No fix listed |
| argosoft ftp server | = 1.4.2.29 | No fix listed |
| argosoft ftp server | = 1.4.3.5 | No fix listed |
References
- 20060508 INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities mailing-list
- 20060502 FTP Fuzzer mailing-list
- 19934 third-party-advisory vendor-advisory
- www.infigo.hr exploit
- www.infigo.hr
- 25216 vdb-entry
- 17789 exploit vdb-entry
- ADV-2006-1639 vdb-entry
- argosoft-ftp-rnto-bo(26197) vdb-entry