https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-1277.htmlhttps://patchthecve.com/cve/CVE-2004-1277.htmlTue, 16 Jun 2026 22:07:23 +0000MEDIUM 5.0: The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.https://patchthecve.com/cve/CVE-2004-1276.htmlhttps://patchthecve.com/cve/CVE-2004-1276.htmlTue, 16 Jun 2026 22:07:22 +0000LOW 2.1: IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP.https://patchthecve.com/cve/CVE-2003-0561.htmlhttps://patchthecve.com/cve/CVE-2003-0561.htmlTue, 16 Jun 2026 22:02:26 +0000HIGH 7.5: Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3) PASS, (4) ACCT, and possibly other commands.