Glftpd

glftpd

Vendor: Glftpd • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31645 1Glftpd 1Glftpd Jun 17, 2026 Jul 7, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit.
CVE-2006-1253 1Glftpd 1Glftpd Apr 16, 2026 Mar 19, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.
CVE-2005-0483 1Glftpd 1Glftpd Apr 16, 2026 Mar 30, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in r...Show more Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in restricted directories, or (3) read arbitrary files from within ZIP or gzip files, via .. (dot dot) sequences and globbing ("*") characters in a SITE NFO command.Show less
CVE-2001-0965 1Glftpd 1Glftpd Apr 16, 2026 Aug 31, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
CVE-2000-0587 1Glftpd 1Glftpd Apr 16, 2026 Jun 26, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
CVE-2000-0040 1Glftpd 1Glftpd Apr 16, 2026 Dec 23, 1999 N/A· v4 N/A· v3 10.0 HIGH· v2 glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
CVE-2000-0038 1Glftpd 1Glftpd Apr 16, 2026 Dec 23, 1999 N/A· v4 N/A· v3 7.5 HIGH· v2 glFtpD includes a default glftpd user account with a default password and a UID of 0.