CVE-2004-1281: The ftp_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via ..

Security readout for executives and security teams

Junkie 0.3.1 can be tricked by a malicious FTP server into writing downloaded files outside the intended location. The issue uses parent-directory filename sequences and may overwrite files the process can access. Business impact depends on whether this legacy software is present and what permissions it runs with. Exposure is likely limited to environments still running junkie 0.3.1 and retrieving files from FTP servers, especially untrusted or attacker-controlled servers. Treat as a targeted legacy-software risk. Prioritize confirmation of presence first; escalate if junkie 0.3.1 handles automated FTP downloads or runs with broad write permissions. Mitigation focus: Inventory systems for junkie 0.3.1 or embedded use of its FTP retrieval code.; Avoid connecting affected clients to untrusted FTP servers.; Run any remaining use with least-privilege filesystem permissions..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.