PT-2000-1521 · Glftpd · Glftpd

Publicado 2000-06-26 · Atualizado 2008-09-10 · CVE-2000-0587

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions glftpd version 1.18

Description The issue allows remote attackers to bypass access restrictions for directories by utilizing the file name completion capability.

Recommendations For glftpd version 1.18, consider disabling the privpath directive as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2000-0587

Produtos afetados

Glftpd

Referências · 4

• http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html · Nota
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl · Nota
• http://securityfocus.com/bid/1401 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0587 · Nota de Segurança