NetSight
low2.1Public exploit code

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via appl…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Affected products

VendorProductAffected versions
GnuFileutils
Versions 4.0, 4.0.36, 4.1, 4.1.6, 4.1.7
Washington UniversityWu-Ftpd
Versions 2.4.1, 2.4.2_beta2, 2.4.2_beta18, 2.4.2_beta18_vr4, 2.4.2_beta18_vr5, 2.4.2_beta18_vr6

References