CVE-2003-1327 Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users....
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| washington university wu-ftpd | <= 2.6.2 | No fix listed |
References
- 20030922 Wu_ftpd all versions (not) vulnerability. mailing-list
- 9835 third-party-advisory vendor-advisory
- 1007775 vdb-entry
- 2594 vdb-entry
- 8668 vdb-entry
- SSA:2003-259-03 vendor-advisory
- wuftp-mailadmin-sockprintf-bo(13269) vdb-entry