Vulnerability in Iglooftp

CVE-2004-1277

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

  • Iglooftp — versions 0.6.1
  • N/a — versions n/a

References