The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.Referenceshttp://www.securityfocus.com/bid/1401http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10006261041360.31907-200000%40twix.thrijswijk.nlhttp://archives.neohapsis.com/archives/bugtraq/2000-06/0317.html
