medium5.0
CVE-2004-1294
The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) ch…
Impact
The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Luke Mewburn | Tnftp | Version 2003-08-25 |