CVE-2004-1294: Luke Mewburn Tnftp

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.

Affected products

• Luke Mewburn Tnftp: version 2003-08-25 only

Published 2005-01-10. Last modified 2026-06-16.