CVE-2004-1276: Iglooftp

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP.

Affected products

• Iglooftp Iglooftp: version 0.6.1 only

Published 2005-01-10. Last modified 2026-06-16.