CVE-2006-1253

HIGH 7.5CVE-2006-1253 · Published 19/03/2006 · updated 16/06/2026

In short

CVE-2006-1253 is a HIGH (CVSS 7.5) vulnerability affecting glftpd (glftpd).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
glftpd glftpd	`= 1.18= 1.19= 1.20= 1.21= 1.22= 1.23= 1.24= 1.25= 1.26= 1.27= 1.28= 1.29= 1.29.1= 1.30= 1.31= 1.32= 2.0= 2.01_rc1= 2.01_rc2= 2.01_rc3= 2.01_rc4= 2.0_rc1= 2.0_rc2= 2.0_rc3= 2.0_rc4= 2.0_rc5= 2.0_rc6= 2.0_rc7`	No fix yet

Description

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.

References

secunia.com/advisories/19221 · Patch
glftpd.com/files/docs/changelog · URL Repurposed
securityfocus.com/bid/17118

More vulnerabilities in glftpd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free