CVE-2001-0768

GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, allowing local users to gain privileges as other FTP users by reading the file. This is a local privilege escalation through credential disclosure; no exploit specifics are provided in the available documents. R...

CVE-2001-0767

CVE-2001-0767 corresponds to a directory traversal flaw in GuildFTPd. Multiple sources (NVD and OpenVAS entries) document that versions around 0.9x/0.97 are affected, allowing an attacker with a valid FTP login to read arbitrary files and directories by inserting .. in FTP commands (LS or GET). T...