CVE-2004-1276

CVE-2004-1276 describes a local file overwrite vulnerability in IglooFTP version 0.6.1. When recursively uploading directories, the software uses predictable temporary file names, allowing a local attacker to create files with those names before IglooFTP opens them, thus overwriting the intended upload. This vulnerability has a low severity CVSS score of 2.1, indicating low attack complexity and local access requirements, with a potential impact of partial integrity compromise. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has received some community discussion.