CVE-2000-0587
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
- EPSS
- 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- glftpd:glftpd
References
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
- http://www.securityfocus.com/bid/1401
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
- http://www.securityfocus.com/bid/1401