CVE-2001-0965

Glftpd - Denial of Service

Title source: rule

Description

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ASGUARD LABS · perldosunix

https://www.exploit-db.com/exploits/21074

View Code ZIP pw:eip

References (4)

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/3201

[Vendor Advisory] http://www.glftpd.org/

[Third Party Advisory] http://www.iss.net/security_center/static/7001.php

[Exploit, Patch, Vendor Advisory] http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html

Scores

EPSS 0.0679

EPSS Percentile 91.4%

Details

Status published

Products (9)

glftpd/glftpd 1.13.6

glftpd/glftpd 1.16.9

glftpd/glftpd 1.17.2

glftpd/glftpd 1.18a

glftpd/glftpd 1.19

glftpd/glftpd 1.20

glftpd/glftpd 1.21

glftpd/glftpd 1.22b

glftpd/glftpd 1.23

Published Aug 31, 2001

Tracked Since Feb 18, 2026