Vulnerability Details CVE-2004-2675
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.058
EPSS Ranking 90.2%
CVSS Severity
CVSS v2 Score 6.8
References
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11332
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15412
- http://secunia.com/advisories/11002
- http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
- http://www.osvdb.org/11332
- http://www.securiteam.com/windowsntfocus/5RP010KCAO.html
- http://www.securityfocus.com/bid/9770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15412
Products affected by CVE-2004-2675
-
cpe:2.3:a:argosoft:ftp_server:1.2.2.2