Vulnerability in Glftpd
CVE-2000-0587
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
EPSS: 0.042 (89.8th percentile) — read the EPSS interpretation.
Affected products
- Glftpd — versions 1.18, 1.19, 1.20
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)