PT-1999-1846 · Glftpd · Glftpd

CVE-2000-0038 · Published 1999-12-23 · Updated 2022-08-17

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: glFtpD (affected versions not specified)

Description: The issue concerns a default user account in glFtpD, which has a default password and is assigned a UID of 0. This setup could potentially allow unauthorized access or elevation of privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0038

Affected Products

Glftpd

References · 3

• 🔥 https://exploit-db.com/exploits/19690 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0038 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-2000-0038 · Note