CVE-2004-2674

ArGoSoft FTP Server prior to 1.4.1.6 is affected by a directory traversal vulnerability that allows remote authenticated users to determine the existence of arbitrary files via .. sequences in the SITE UNZIP argument. The root cause is improper handling of path traversal in the SITE UNZIP command...