CVE-2000-0587: Glftpd

High severity, CVSS 10.0. EPSS: 4.2% chance of exploitation in the next 30 days.

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

Affected products

• Glftpd Glftpd: version 1.18 only; version 1.19 only; version 1.20 only; version 1.21b1 only; version 1.21b2 only; version 1.21b3 only; …

Published 2000-06-26. Last modified 2026-06-16.