CVE-2004-1277

CVE-2004-1277 concerns IglooFTP 0.6.1 where the download_selection_recursive() function in ftplist.c is vulnerable. A remote FTP server can cause arbitrary files to be overwritten via filenames containing a forward slash ('/'), indicating a path traversal-like flaw within the file listing/selecti...

CVE-2004-1277: Undefined Security Weakness

The downloadselectionrecursive function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / slash characters...