VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 26, 2000· Updated Jun 16, 2026

CVE-2000-0587

CVE-2000-0587

Description

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Affected products

12
  • Glftpd/Glftpd12 versions
    cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b1:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b2:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b3:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b4:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b5:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b6:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b7:*:*:*:*:*:*:*
    • cpe:2.3:a:glftpd:glftpd:1.21b8:*:*:*:*:*:*:*
    • (no CPE)range: =1.18

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.