CVE-2001-0965: Glftpd

Medium severity, CVSS 5.0. EPSS: 7.1% chance of exploitation in the next 30 days.

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.

Affected products

• Glftpd Glftpd: version 1.13.6 only; version 1.16.9 only; version 1.17.2 only; version 1.18a only; version 1.19 only; version 1.20 only; …

Published 2001-08-31. Last modified 2026-06-16.