PT-2000-1521 · Glftpd · Glftpd

Published 2000-06-26 · Updated 2008-09-10 · CVE-2000-0587

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions glftpd version 1.18

Description The issue allows remote attackers to bypass access restrictions for directories by utilizing the file name completion capability.

Recommendations For glftpd version 1.18, consider disabling the privpath directive as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2000-0587

Affected Products

Glftpd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0587 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl · Note
• http://securityfocus.com/bid/1401 · Note