Vulnerabilities > CVE-2004-1277 - Remote Security vulnerability in Iglooftp 0.6.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
iglooftp

Summary

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.

Vulnerable Configurations

Part Description Count
Application
Iglooftp
1