Lucene search

MitreCVE-2004-1277

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-1277

2005-01-1005:00:00

mitre

web.nvd.nist.gov

iglooftp

download_selection_recursive

ftp

remote servers

file overwrite

cve-2004-1277

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

49.9%

JSON

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.

Affected configurations

Nvd

Node

iglooftpiglooftpMatch0.6.1

VendorProductVersionCPE
iglooftpiglooftp0.6.1cpe:2.3:a:iglooftp:iglooftp:0.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iglooftp	iglooftp	0.6.1	cpe:2.3:a:iglooftp:iglooftp:0.6.1:::::::*

References

tigger.uic.edu/~jlongs2/holes/iglooftp2.txt

exchange.xforce.ibmcloud.com/vulnerabilities/18561

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

49.9%

JSON

Related for CVE-2004-1277