CVEvulnerability
CVE-2004-1276
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-01-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP.
Affected configurations
• iglooftp iglooftp 0.6.1
References
- http://tigger.uic.edu/~jlongs2/holes/iglooftp.txt Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18632 exchange.xforce.ibmcloud.com
- http://tigger.uic.edu/~jlongs2/holes/iglooftp.txt Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18632 exchange.xforce.ibmcloud.com