Description
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
References
- 1401 vdb-entry
- 20000626 Glftpd privpath bugs... +fix mailing-list
- 20000627 Re: Glftpd privpath bugs... +fix mailing-list