Unscored CVE-2004-1277 EUVD-2004-1274GHSA-ccq8-f8pw-f359

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary file…

Published Dec 22, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.

References

iglooftp-file-overwrite(18561) vdb-entry
http://tigger.uic.edu/~jlongs2/holes/iglooftp2.txt