CVE-2000-0587

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2000-06-26

Last modified

2024-08-08

Affected products

• Glftpd (Glftpd)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
• http://www.securityfocus.com/bid/1401
• http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijsw…