88 matches found
ArGoSoft FTP Server < 1.4.2.8 Shortcut File Extension Filter Bypass
Binary data 2604.prm...
ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities
The remote host is running the ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server allows an attacker to upload shortcut .LNK files via either a 'SITE UNZIP' or 'SITE COPY' command and gain read and write access to any files and directories on the FTP server. C Tenable Network Security,...
ArGoSoft FTP Server USER Command Account Enumeration
The remote host is running the ArGoSoft FTP Server. The remote version of this software returns different error messages when a user attempts to log in using a nonexistent username or a bad password. An attacker may exploit this flaw to launch a dictionary attack against the remote host in order ...
ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks
Vendor: ArGoSoft Date: December 31, 2004 Issue: ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks URL: http://www.argosoft.com/ftpserver/ Advisory: http://www.lovebug.org/argosoftadvisory.txt Program Overview: ArGoSoft FTP Server is a lightweight FTP Server for...
ArGoSoft FTP Server user enumeration
Server reports invalid username...
CVE-2004-2673
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via 1 a SITE ZIP command with a long first or second argument, or 2 a SITE COPY with a long argument...
CVE-2004-2672
Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors...
CVE-2004-2675
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service crash via a SITE PASS command with a long password parameter, which causes the database to be corrupted...
CVE-2004-2674
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument...
ArGoSoft FTP Server .lnk Shortcut Upload Arbitrary File Manipulation
The remote host is running ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server is prone to an attack that allows link upload. An attacker, exploiting this flaw, may be able to have read and write access to any files and directories on the FTP server. C Tenable Network Security, Inc...
ArGoSoft FTP Server < 1.4.2.2 Shortcut File Upload
Binary data 2385.prm...
ArGoSoft FTP Server < 1.4.3.7 RNTO Overflow
Binary data 3529.prm...
ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities
ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP...
ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...
argosoft ftp server buffer overflow.
Hi, I've found that while using the command XCWD it is possible to overwrite the server memory and crash it. to overwrite the servers memory attacker have to do the following: verify the logging option is off turned off by default. successfuly login to the ftp server. at this point if attacker wi...
Buffer overflow in ArgoSoft FTP Server
Product: ArGoSOft FTP Server Version: 1.22 other ? OffSite: http://www.argosoft.com/ Problem: Remote buffer overflow -------------------------------------------------------------- ArGoSOft FTP Server - FTP server for Windows. He is exposed to attack. The server does not process the input data...
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2001-1043: Improper Link Resolution Before File Access
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2001-1142
The CVE-2001-1142 entry concerns ArGoSoft FTP Server 1.2.2.2, which uses weak password encryption. The underlying issue, as described in the connected sources, is that passwords stored in the password file are protected by weak encryption, enabling an attacker with access to that file to gain pri...