Approved changes feed: RSS · Atom

cpe:2.3:a:iglooftp:iglooftp:0.6.1:*:*:*:*:*:*:*

part: a version: 0.6.1 update: *

VendorIglooftp (4f7ee0dc-80ca-50c0-a389-155898365c0e)
ProductIglooftp (19b9045c-cc85-51b9-83ab-9bf869e72826)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1277 vulnerable 2026-06-08 04:47:53.480307 Details available
The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:46:12.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1276 vulnerable 2026-06-08 04:47:53.479975 Details available
IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP.
Published: 2004-12-22T05:00:00.000Z
Updated: 2024-08-08T00:46:12.341Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.