CVE-2000-0587

Published: Jun 26, 2000Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Affected (11)

Products: Glftpd: Glftpd

Glftpd

1 product

Glftpd

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Glftpd Glftpd	Version 1.18
Glftpd Glftpd	Version 1.19
Glftpd Glftpd	Version 1.20
Glftpd Glftpd	Version 1.21b1
Glftpd Glftpd	Version 1.21b2
Glftpd Glftpd	Version 1.21b3
Glftpd Glftpd	Version 1.21b4
Glftpd Glftpd	Version 1.21b5
Glftpd Glftpd	Version 1.21b6
Glftpd Glftpd	Version 1.21b7
Glftpd Glftpd	Version 1.21b8

References (6)

http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/1401

Source: cve@mitre.org

http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/1401

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.