critical10.0
CVE-2000-0587
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
Impact
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Glftpd | Glftpd | Versions 1.18, 1.19, 1.20, 1.21b1, 1.21b2, 1.21b3 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
- http://www.securityfocus.com/bid/1401
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl
- http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
- http://www.securityfocus.com/bid/1401
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl