CVE-2000-0587

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b1:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b2:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b3:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b4:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b5:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b6:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b7:*:*:*:*:*:*:*
cpe:2.3:a:glftpd:glftpd:1.21b8:*:*:*:*:*:*:*

History

20 Nov 2024, 23:32

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html - () http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html -
References () http://www.securityfocus.com/bid/1401 - () http://www.securityfocus.com/bid/1401 -
References () http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl - () http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl -

07 Nov 2023, 01:55

Type Values Removed Values Added
References
  • {'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000@twix.thrijswijk.nl', 'name': '20000626 Glftpd privpath bugs... +fix', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'BUGTRAQ'}
  • () http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl -

Information

Published : 2000-06-26 04:00

Updated : 2024-11-20 23:32


NVD link : CVE-2000-0587

Mitre link : CVE-2000-0587

CVE.ORG link : CVE-2000-0587


JSON object : View

Products Affected

glftpd

  • glftpd