CVE-2004-1277: Iglooftp

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.

Affected products

• Iglooftp Iglooftp: version 0.6.1 only

Published 2005-01-10. Last modified 2026-06-16.