Argosoft Ftp Server vulnerabilities
13 known vulnerabilities affecting argosoft/ftp_server.
Total CVEs
13
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH5MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2001-1142P4MEDIUMCVSS 5.0PoCv1.2.2.22001-07-12
CVE-2001-1142 [MEDIUM] CVE-2001-1142: ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with a
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
nvd
CVE-2004-2675P4MEDIUMCVSS 6.8PoC≤ 1.4.1.52004-12-31
CVE-2004-2675 [MEDIUM] CVE-2004-2675: ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (c
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted.
nvd
CVE-2005-0519P4CRITICALCVSS 10.0v1.4.1.1v1.4.1.2+10 more2005-02-18
CVE-2005-0519 [CRITICAL] CVE-2005-0519: ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZI
ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.
nvd
CVE-2005-0520P4CRITICALCVSS 10.0v1.4.1.1v1.4.1.2+10 more2005-02-23
CVE-2005-0520 [CRITICAL] CVE-2005-0520: ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LN
ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the SITE COPY command, a different vulnerability than CVE-2005-0519.
nvd
CVE-2006-2170P3MEDIUMCVSS 6.4v1.4.1.1v1.4.1.2+14 more2006-05-04
CVE-2006-2170 [MEDIUM] CVE-2006-2170: Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via
Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.
nvd
CVE-2005-0696P4HIGHCVSS 7.5v1.4.2.8v1.4.2.29+1 more2005-03-08
CVE-2005-0696 [HIGH] CVE-2005-0696: Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrar
Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long DELE command. NOTE: this issue was later reported to also affect 1.4.3.5.
nvd
CVE-2004-2673P4CRITICALCVSS 9.0≤ 1.4.1.52004-12-31
CVE-2004-2673 [CRITICAL] CVE-2004-2673: Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument.
nvd
CVE-2004-1429P4HIGHCVSS 7.5≤ 1.4.2.4v1.4.1.1+10 more2004-12-31
CVE-2004-1429 [HIGH] CVE-2004-1429: ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be enter
ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote attackers to guess passwords via a brute force attack.
nvd
CVE-2001-1043P4HIGHCVSS 7.5v1.2.2.22001-07-01
CVE-2001-1043 [HIGH] CWE-59 CVE-2001-1043: ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploa
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
nvd
CVE-2000-1194P4HIGHCVSS 7.5v1.02001-08-31
CVE-2000-1194 [HIGH] CVE-2000-1194: Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute a
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
nvd
CVE-2004-2672P4HIGHCVSS 7.5≤ 1.4.2.1v1.4.22004-12-31
CVE-2004-2672 [HIGH] CVE-2004-2672: Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk file
Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors.
nvd
CVE-2004-2674P4MEDIUMCVSS 6.8≤ 1.4.1.52004-12-31
CVE-2004-2674 [MEDIUM] CVE-2004-2674: Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
nvd
CVE-2004-1428P4MEDIUMCVSS 5.0fixed in 1.4.2.12004-12-31
CVE-2004-1428 [MEDIUM] CWE-203 CVE-2004-1428: ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of pr
ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames.
nvd