CVE-2004-2674

Published: Dec 31, 2004Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.

Affected (1)

Products: Argosoft: Ftp Server

Argosoft

1 product

Ftp Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Argosoft Ftp Server	Up to 1.4.1.5

References (12)

http://secunia.com/advisories/11002

Source: cve@mitre.org

Patch

http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx

Source: cve@mitre.org

http://www.osvdb.org/11333

Source: cve@mitre.org

http://www.securiteam.com/windowsntfocus/5RP010KCAO.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/9770

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15411

Source: cve@mitre.org

http://secunia.com/advisories/11002