Vulnerability in Gnu Fileutils
CVE-2003-0854
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
EPSS: 0.011 (60.8th percentile) — read the EPSS interpretation.
Affected products
- Gnu Fileutils — versions 4.0, 4.0.36, 4.1
- Washington_university Wu-ftpd — versions 2.4.1, 2.4.2_beta2, 2.4.2_beta18
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_TURBO)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_IMMUNIX)