CVE-2005-0519

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-18 · updated 2026-06-16

Description

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.

Affected products

Argosoft Ftp Server: 1.4.1.1, 1.4.1.2, 1.4.1.3, 1.4.1.4, 1.4.1.5, 1.4.1.6 (+6)

References

http://secunia.com/advisories/14172
http://www.argosoft.com/ftpserver/changelist.aspx
http://www.osvdb.org/13614
http://www.securityfocus.com/bid/12487
https://exchange.xforce.ibmcloud.com/vulnerabilities/17939
http://secunia.com/advisories/14172
http://www.argosoft.com/ftpserver/changelist.aspx
http://www.osvdb.org/13614
http://www.securityfocus.com/bid/12487
https://exchange.xforce.ibmcloud.com/vulnerabilities/17939

Get alerted when CVE-2005-0519 or the next vulnerability affects your stack