PT-2006-3149 · Argosoft · Argosoft Ftp Server

Leon Juranic · Published 2006-05-04 · Updated 2017-07-20 · CVE-2006-2170

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions ArgoSoft FTP Server version 1.4.3.6

Description The issue allows remote attackers to execute arbitrary code via Unicode in the RNTO command. This can be demonstrated using tools like the Infigo FTPStress Fuzzer.

Recommendations For ArgoSoft FTP Server version 1.4.3.6, consider disabling the RNTO command until a patch is available to prevent potential exploitation. Restrict access to the server to minimize the risk of arbitrary code execution.

Exploit

Fix

Related Identifiers

CVE-2006-2170

Affected Products

Argosoft Ftp Server

References · 10

• 🔥 http://infigo.hr/en/in_focus/tools · Exploit
• 🔥 http://securityfocus.com/bid/17789 · Exploit
• http://secunia.com/advisories/19934 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2170 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html · Note
• http://infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 · Note
• http://vupen.com/english/advisories/2006/1639 · Note
• http://osvdb.org/25216 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26197 · Note
• http://marc.info/?l=bugtraq&m=114658586018818&w=2 · Note