CVE Vulnerabilities

CVE-2000-0587

Published: Jun 26, 2000 | Modified: Sep 10, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Affected Software

Name Vendor Start Version End Version
Glftpd Glftpd 1.18 1.18
Glftpd Glftpd 1.19 1.19
Glftpd Glftpd 1.20 1.20
Glftpd Glftpd 1.21b1 1.21b1
Glftpd Glftpd 1.21b2 1.21b2
Glftpd Glftpd 1.21b3 1.21b3
Glftpd Glftpd 1.21b4 1.21b4
Glftpd Glftpd 1.21b5 1.21b5
Glftpd Glftpd 1.21b6 1.21b6
Glftpd Glftpd 1.21b7 1.21b7
Glftpd Glftpd 1.21b8 1.21b8

References