PT-2006-3149 · Argosoft · Argosoft Ftp Server

Leon Juranic · Publicado 2006-05-04 · Atualizado 2017-07-20 · CVE-2006-2170

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions ArgoSoft FTP Server version 1.4.3.6

Description The issue allows remote attackers to execute arbitrary code via Unicode in the RNTO command. This can be demonstrated using tools like the Infigo FTPStress Fuzzer.

Recommendations For ArgoSoft FTP Server version 1.4.3.6, consider disabling the RNTO command until a patch is available to prevent potential exploitation. Restrict access to the server to minimize the risk of arbitrary code execution.

Exploit

Correção

Identificadores relacionados

CVE-2006-2170

Produtos afetados

Argosoft Ftp Server

Referências · 10

• 🔥 http://infigo.hr/en/in_focus/tools · Exploit
• 🔥 http://securityfocus.com/bid/17789 · Exploit
• http://secunia.com/advisories/19934 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html · Nota
• http://infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 · Nota
• http://vupen.com/english/advisories/2006/1639 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2170 · Nota de Segurança
• http://osvdb.org/25216 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26197 · Nota
• http://marc.info/?l=bugtraq&m=114658586018818&w=2 · Nota