CVE-2006-2170

Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer.

Affected Software

Name	Vendor	Start Version	End Version
Ftp_server	Argosoft	1.4.1.1 (including)	1.4.1.1 (including)
Ftp_server	Argosoft	1.4.1.2 (including)	1.4.1.2 (including)
Ftp_server	Argosoft	1.4.1.3 (including)	1.4.1.3 (including)
Ftp_server	Argosoft	1.4.1.4 (including)	1.4.1.4 (including)
Ftp_server	Argosoft	1.4.1.5 (including)	1.4.1.5 (including)
Ftp_server	Argosoft	1.4.1.6 (including)	1.4.1.6 (including)
Ftp_server	Argosoft	1.4.1.7 (including)	1.4.1.7 (including)
Ftp_server	Argosoft	1.4.1.8 (including)	1.4.1.8 (including)
Ftp_server	Argosoft	1.4.1.9 (including)	1.4.1.9 (including)
Ftp_server	Argosoft	1.4.2 (including)	1.4.2 (including)
Ftp_server	Argosoft	1.4.2.1 (including)	1.4.2.1 (including)
Ftp_server	Argosoft	1.4.2.2 (including)	1.4.2.2 (including)
Ftp_server	Argosoft	1.4.2.7 (including)	1.4.2.7 (including)
Ftp_server	Argosoft	1.4.2.8 (including)	1.4.2.8 (including)
Ftp_server	Argosoft	1.4.2.29 (including)	1.4.2.29 (including)
Ftp_server	Argosoft	1.4.3.5 (including)	1.4.3.5 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-2170
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References