148 matches found
CVE-2005-2184
Technical details about CVE-2005-2184 are not publicly provided in the connected documents. The available descriptions note that eRoom 6.x allows arbitrary commands via a .lnk attachment, but no specific impact, affected versions, or fixes are disclosed here. Monitor for updates.
CVE-2005-0519
ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut .LNK file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520...
ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities
The remote host is running the ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server allows an attacker to upload shortcut .LNK files via either a 'SITE UNZIP' or 'SITE COPY' command and gain read and write access to any files and directories on the FTP server. C Tenable Network Security,...
CVE-2001-1043
The CVE-2001-1043 issue affects ArGoSoft FTP Server 1.2.2.2. A remote attacker can read arbitrary files and directories by uploading a .lnk link file that points to the target file, exploiting a file upload/link handling weakness. Root cause: improper handling of Windows .lnk files during file up...
EFTP .lnk File Handling Remote Overflow
The version of EFTP running on the remote host has a remote buffer overflow vulnerability. Issuing the LS command on a maliciously crafted .lnk file results in an overflow. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security,...
CVE-2001-1042
Transsoft Broker 5.9.5.0 is vulnerable: an attacker can upload a .lnk file that points to a target file, enabling remote reading of arbitrary files and directories. Root cause: mis-handling of .lnk file uploads allows access to target paths. Impact: read access to arbitrary files/directories on t...
CVE-2000-0129
The vulnerability CVE-2000-0129 affects the Serv-U FTP server. A buffer overflow in SHGetPathFromIDList can be triggered by a LIST command on a malformed .lnk file, leading to a denial of service. Exploitation details are not provided in the documents. PT-2000-1115 notes affected versions are not...