CVE-2000-0587

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2000-06-26 · updated 2026-06-16

Description

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Affected products

Glftpd: 1.18, 1.19, 1.20, 1.21b1, 1.21b2, 1.21b3 (+5)

References

http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
http://www.securityfocus.com/bid/1401
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl
http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
http://www.securityfocus.com/bid/1401
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl

Get alerted when CVE-2000-0587 or the next vulnerability affects your stack