glftpd versions 1.26 to 2.00 suffer from directory traversal and information disclosure vulnerabilities.