CVE-2004-1428

ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames...

ArGoSoft FTP Server < 1.4.2.8 Shortcut File Extension Filter Bypass

Binary data 2604.prm...

ArGoSoft FTP Server < 1.4.2.8 Multiple .LNK File Handling Vulnerabilities

The remote host is running the ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server allows an attacker to upload shortcut .LNK files via either a 'SITE UNZIP' or 'SITE COPY' command and gain read and write access to any files and directories on the FTP server. C Tenable Network Security,...

ArGoSoft FTP Server USER Command Account Enumeration

The remote host is running the ArGoSoft FTP Server. The remote version of this software returns different error messages when a user attempts to log in using a nonexistent username or a bad password. An attacker may exploit this flaw to launch a dictionary attack against the remote host in order ...

ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks

Vendor: ArGoSoft Date: December 31, 2004 Issue: ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks URL: http://www.argosoft.com/ftpserver/ Advisory: http://www.lovebug.org/argosoftadvisory.txt Program Overview: ArGoSoft FTP Server is a lightweight FTP Server for...

ArGoSoft FTP Server user enumeration

Server reports invalid username...

CVE-2004-2672

Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors...

CVE-2004-2674

Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument...

CVE-2004-1428

ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames...

CVE-2004-2675

ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service crash via a SITE PASS command with a long password parameter, which causes the database to be corrupted...

CVE-2004-1429

ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote attackers to guess passwords via a brute force attack...

CVE-2004-2673

Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via 1 a SITE ZIP command with a long first or second argument, or 2 a SITE COPY with a long argument...

PT-2004-2343 · Argosoft · Argosoft Ftp

Name of the Vulnerable Software and Affected Versions: ArGoSoft FTP versions prior to 1.4.2.1 Description: The issue allows remote attackers to determine valid usernames by generating an error message if the user name does not exist instead of prompting for a password. Recommendations: For versio...

ArGoSoft FTP Server .lnk Shortcut Upload Arbitrary File Manipulation

The remote host is running ArGoSoft FTP Server. It is reported that ArGoSoft FTP Server is prone to an attack that allows link upload. An attacker, exploiting this flaw, may be able to have read and write access to any files and directories on the FTP server. C Tenable Network Security, Inc...

ArGoSoft FTP Server < 1.4.2.2 Shortcut File Upload

Binary data 2385.prm...

ArGoSoft FTP Server < 1.4.3.7 RNTO Overflow

Binary data 3529.prm...

ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities

ArGoSoft FTP Server 1.01.21.4 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP...

ArGoSoft FTP Server 1.0/1.2/1.4 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9770/info ArGoSoft has released version 1.4.1.6 of their FTP Server to address multiple unspecified security vulnerabilities. These issues include three buffer overruns when handling overly long FTP SITE ZIP and SITE COPY commands, a file enumeration issu...

argosoft ftp server buffer overflow.

Hi, I've found that while using the command XCWD it is possible to overwrite the server memory and crash it. to overwrite the servers memory attacker have to do the following: verify the logging option is off turned off by default. successfuly login to the ftp server. at this point if attacker wi...

Buffer overflow in ArgoSoft FTP

Buffer overflow in all commands...