Detections
Analytics
ArGoSoft FTP Server < 1.4.2.8 Shortcut File Extension Filter Bypass
critical Nessus Network Monitor Plugin ID 2604
Synopsis
The remote host is vulnerable to multiple attack vectors.Description
The remote host is running the ArGoSoft FTP Server.It is reported that ArGoSoft FTP Server is prone to a vulnerability that
allows a user to bypass a filter forbidding link upload. An attacker
exploiting this flaw may be able to have read and write access to any
files and directories on the FTP server.
Solution
Upgrade to ArGoSoft FTP 1.4.2.8 or higher.Plugin Details
Severity: Critical
ID: 2604
Family: FTP Servers
Published: 2/9/2005
Updated: 3/6/2019
Nessus ID: 16334
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 9.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:argosoft:ftp_server
Reference Information
CVE: CVE-2005-0519, CVE-2005-0520