CVE-2006-1253: Glftpd

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.

Affected products

• Glftpd Glftpd: version 1.18 only; version 1.19 only; version 1.20 only; version 1.21 only; version 1.22 only; version 1.23 only; …

Published 2006-03-19. Last modified 2026-06-16.