Vulnerabilities

TI-2021-11727 CVE-2021-31645 · GHSA-983g-85mv-cf26

An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of…

LOW 37

An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01958 Published 2022-07-07 No fix listed CWE-770

TI-2006-01212 CVE-2006-1253 · GHSA-g5h2-9hg8-5rm9

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP…

LOW 36

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01544 Published 2006-03-19 No fix listed

TI-2005-00440 CVE-2005-0483 · GHSA-53qv-629p-53cf

Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and…

LOW 27

Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and siteziplist.sh in Glftpd 1.26 to 2.00 allow remote authenticated users to (1) determine the existence of arbitrary files, (2) list files in r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01969 Published 2005-02-19 No fix listed

TI-2001-00921 CVE-2001-0965 · GHSA-2727-3q8f-vqf3

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a…

LOW 33

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07132 Published 2002-03-09 No fix listed

TI-2000-00585 CVE-2000-0587 · GHSA-gphm-f2g3-9rr5

The privpath directive in glftpd 1.18 allows remote attackers to bypass access…

MEDIUM 50

The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04162 Published 2000-10-13 No fix listed

TI-2000-00040 CVE-2000-0040 · GHSA-w4rv-5mh3-w9fg

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

MEDIUM 47

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01906 Published 2000-03-22 No fix listed

TI-2000-00038 CVE-2000-0038 · GHSA-m63m-44rp-4r45

glFtpD includes a default glftpd user account with a default password and a UID of 0.

MEDIUM 42

glFtpD includes a default glftpd user account with a default password and a UID of 0.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06567 Published 2000-02-04 No fix listed

Vulnerabilities

Filters

An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of…

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP…

Multiple directory traversal vulnerabilities in sitenfo.sh, sitezipchk.sh, and…

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a…

The privpath directive in glftpd 1.18 allows remote attackers to bypass access…

glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.

glFtpD includes a default glftpd user account with a default password and a UID of 0.