| Package | Affected versions | Patched versions |
|---|---|---|
| glftpd | = 1.18= 1.19= 1.20= 1.21b1= 1.21b2= 1.21b3= 1.21b4= 1.21b5= 1.21b6= 1.21b7= 1.21b8 |
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free