CVE-2004-1280 The gui_popup_view_fly function in gui_tview_popup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename.
HighCVSS 10.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The gui_popup_view_fly function in gui_tview_popup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| junkie ftp client | = 0.3.1 | No fix listed |
References
- tigger.uic.edu exploit vendor-advisory
- junkie-command-execution(18567) vdb-entry