← All advisories

Unrated severityNVD Advisory· Published Jan 10, 2005· Updated Jun 16, 2026

CVE-2004-1281

CVE-2004-1281

Description

The ftp_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in a filename.

Affected products

2

Junkie/Junkie FTP Client
cpe:2.3:a:junkie:junkie_ftp_client:0.3.1:*:*:*:*:*:*:*
Junkie/junkiellm-fuzzy
Range: = 0.3.1

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

tigger.uic.edu/~jlongs2/holes/junkie.txtnvdExploitVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/18568nvd

News mentions

0

No linked articles in our index yet.