NetSight
IP …
medium5.0Public exploit code

CVE-2003-0853

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w va…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Affected products

VendorProductAffected versions
GnuFileutils
Versions 4.0, 4.0.36, 4.1, 4.1.6, 4.1.7
Washington UniversityWu-Ftpd
Versions 2.4.1, 2.4.2_beta2, 2.4.2_beta18, 2.4.2_beta18_vr4, 2.4.2_beta18_vr5, 2.4.2_beta18_vr6

References