CVE-2004-1281: Junkie FTP Client

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The ftp_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in a filename.

Affected products

• Junkie Junkie FTP Client: version 0.3.1 only

Published 2005-01-10. Last modified 2026-06-16.