CVE-2003-0853

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Affected products

Red Hat, Fileutils, Wu-Ftpd

Gnu Fileutils

= 4.0, 4.0.36, 4.1, 4.1.6, 4.1.7

Washington University Wu-ftpd

= 2.4.1, 2.4.2_beta2, 2.4.2_beta18, 2.4.2_beta18_vr4, 2.4.2_beta18_vr5, 2.4.2_beta18_vr6, 2.4.2_beta18_vr7, 2.4.2_beta18_vr8, 2.4.2_beta18_vr9, 2.4.2_beta18_vr10, 2.4.2_beta18_vr11, 2.4.2_beta18_vr12, 2.4.2_beta18_vr13, 2.4.2_beta18_vr14, 2.4.2_beta18_vr15, 2.4.2_vr16, 2.4.2_vr17, 2.5.0, 2.6.0, 2.6.1, 2.6.2

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

10.4% (95th percentile)

NVD status

Modified

Published

2003-10-25