NetSight
IP …
critical9.8Public exploit code

CVE-2003-0466

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.

Affected products

VendorProductAffected versions
RedhatWu Ftpd
Version 2.6.1-16
WuftpdWu-Ftpd
from 2.5.0 through 2.6.2
AppleMac Os X
Version 10.2.6
AppleMac Os X Server
Version 10.2.6
FreebsdFreebsd
from 4.0 through 5.0
NetbsdNetbsd
from 1.5 through 1.6.1
OpenbsdOpenbsd
from 2.0 through 3.3
SunSolaris
Version 9.0

Weakness classification

CWE-193

References