CVE-2005-0519
CVE-2005-0519 is a critical-severity vulnerability in Argosoft Ftp Server with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 4% (89th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Argosoft Ftp Server
- Published:
- Last modified:
Description
ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.
Frequently asked questions
- What is CVE-2005-0519?
- ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (.LNK) file, using SITE UNZIP to extract the .LNK file onto the server, then accessing the file, a different vulnerability than CVE-2005-0520.
- How severe is CVE-2005-0519?
- CVE-2005-0519 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2005-0519 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-0519?
- CVE-2005-0519 primarily affects Argosoft Ftp Server. In total, 12 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-0519?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2005-0519 published?
- CVE-2005-0519 was published on 2005-02-18 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/14172
- http://www.argosoft.com/ftpserver/changelist.aspx
- http://www.osvdb.org/13614
- http://www.securityfocus.com/bid/12487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17939
Affected products (12)
- cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:argosoft:ftp_server:1.4.2.2:*:*:*:*:*:*:*
More vulnerabilities in Argosoft Ftp Server
- CVE-2005-0520 — Critical (CVSS 10.0): ArGoSoft FTP Server before 1.4.2.8 allows remote attackers to read arbitrary files via shortcut (.LNK) files in the…
- CVE-2004-2673 — Critical (CVSS 9.0): Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of…
- CVE-2005-0696 — High (CVSS 7.5): Buffer overflow in ArGoSoft FTP Server 1.4.2.8 allows remote authenticated users to execute arbitrary code via a long…
- CVE-2004-2672 — High (CVSS 7.5): Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown…
- CVE-2004-1429 — High (CVSS 7.5): ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it…
- CVE-2000-1194 — High (CVSS 7.5): Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands,…