Approved changes feed: RSS · Atom

cpe:2.3:a:luke_mewburn:tnftp:2003-08-25:*:*:*:*:*:*:*

part: a version: 2003-08-25 update: *

VendorLuke Mewburn (ca2c8bbc-9970-56ae-bf5b-218cfa12bf87)
ProductTnftp (465ee183-669c-515f-b442-d5216f130102)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/tnftp purl2cpe 2026-06-01 10:12:14.156186
pkg:deb/ubuntu/tnftp purl2cpe 2026-06-01 10:12:14.156189
pkg:github/hharte/tnftp purl2cpe 2026-06-01 10:12:14.156192
pkg:rpm/fedora/tnftp purl2cpe 2026-06-01 10:12:14.156195
pkg:rpm/opensuse/tnftp purl2cpe 2026-06-01 10:12:14.156198

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1294 vulnerable 2026-06-08 04:47:53.506718 Details available
The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:46:12.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.