« Back to list

CVE-2000-0587

Status: ModifiedHigh (10)—

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Glftpd — Glftpd

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2000-0587",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2000-06-26T04:00:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/1401",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/1401",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nl",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability."
    }
  ],
  "lastModified": "2026-06-16T21:52:03.443",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E50A926-D68F-4B1E-A009-0808611885B7"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EC24C84-A059-4F09-AE7D-1F077AE8F291"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B8C2E9C-2305-4DAD-8406-D5BFAFBBEEC3"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CF143A96-B3A2-4876-8B50-C583B891752D"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3031BA2A-5FEC-425E-AA1E-DA39FD9CF94E"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A877D2D-854A-4614-931B-BC42E70CEE8A"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "070A2213-B877-42DE-9112-7A90E13778C7"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "53DC7530-D9CC-4E1B-A96D-505CE0005192"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6DAF880E-B556-465A-8CB8-47196EF0D9B1"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34704098-AD9F-405B-AB35-923546A8B7D9"
            },
            {
              "criteria": "cpe:2.3:a:glftpd:glftpd:1.21b8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33E8DEBD-42E4-4EBF-87BF-7F620584BA9B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}