VULNERABILITY INTELLIGENCE

CVE-2004-1294

CVSS score5 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2005-01-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.

Primary references