CVE-2003-0853 An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited vi...
MediumCVSS 5.0
EPSS 11.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU fileutils | = 4.0 | No fix listed |
| GNU fileutils | = 4.0.36 | No fix listed |
| GNU fileutils | = 4.1 | No fix listed |
| GNU fileutils | = 4.1.6 | No fix listed |
| GNU fileutils | = 4.1.7 | No fix listed |
| washington university wu-ftpd | = 2.4.1 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta2 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr4 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr5 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr6 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr7 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr8 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr9 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr10 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr11 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr12 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr13 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr14 | No fix listed |
| washington university wu-ftpd | = 2.4.2_beta18_vr15 | No fix listed |
| washington university wu-ftpd | = 2.4.2_vr16 | No fix listed |
| washington university wu-ftpd | = 2.4.2_vr17 | No fix listed |
| washington university wu-ftpd | = 2.5.0 | No fix listed |
| washington university wu-ftpd | = 2.6.0 | No fix listed |
| washington university wu-ftpd | = 2.6.1 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| washington university wu-ftpd | = 2.6.2 | No fix listed |
| debian/coreutils(Debian:12) | < 5.2.1-1 | 5.2.1-1 |
| debian/coreutils(Debian:13) | < 5.2.1-1 | 5.2.1-1 |
| debian/coreutils(Debian:14) | < 5.2.1-1 | 5.2.1-1 |
References
- Debian Security Tracker CVE-2003-0853 vendor-advisory
- CLA-2003:768 vendor-advisory
- CLA-2003:771 vendor-advisory
- 20031022 Fun with /bin/ls, yet still ls better than windows mailing-list
- 10126 third-party-advisory
- 17069 third-party-advisory
- support.avaya.com
- www.guninski.com
- MDKSA-2003:106 vendor-advisory
- RHSA-2003:309 vendor-advisory
- RHSA-2003:310 vendor-advisory
- IMNX-2003-7+-026-01 vendor-advisory
- 8875 exploit patch vdb-entry vendor-advisory
- TLSA-2003-60 vendor-advisory