CVE-2004-1294

CVE-2004-1294 describes a vulnerability in the mget function of tnftp 20030825, allowing malicious FTP servers to overwrite arbitrary files on a client system. This is achieved by crafting FTP responses that include filenames containing slash characters. With a CVSS score of 5.0, it's a medium-severity issue, indicating a network-based attack with low complexity, requiring no authentication, and primarily impacting integrity (data modification). While there's no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, the vulnerability has garnered significant community discussion, suggesting awareness among security researchers.