Vulnerability in GNU Fileutils
CVE-2003-0853
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
EPSS: 0.111 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Gnu Fileutils — versions 4.0, 4.0.36, 4.1
- Washington_university Wu-ftpd — versions 2.4.1, 2.4.2_beta2, 2.4.2_beta18
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_TURBO)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_IMMUNIX)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)