Lucene search

MitreCVE-2003-0853

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0853

2003-11-1705:00:00

mitre

web.nvd.nist.gov

cve-2003-0853

integer overflow

denial of service

arbitrary code execution

fileutils

coreutils

vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Affected configurations

Nvd

Node

gnufileutilsMatch4.0

gnufileutilsMatch4.0.36

gnufileutilsMatch4.1

gnufileutilsMatch4.1.6

gnufileutilsMatch4.1.7

washington_universitywu-ftpdMatch2.4.1

washington_universitywu-ftpdMatch2.4.2_beta2academ

washington_universitywu-ftpdMatch2.4.2_beta18academ

washington_universitywu-ftpdMatch2.4.2_beta18_vr4

washington_universitywu-ftpdMatch2.4.2_beta18_vr5

washington_universitywu-ftpdMatch2.4.2_beta18_vr6

washington_universitywu-ftpdMatch2.4.2_beta18_vr7

washington_universitywu-ftpdMatch2.4.2_beta18_vr8

washington_universitywu-ftpdMatch2.4.2_beta18_vr9

washington_universitywu-ftpdMatch2.4.2_beta18_vr10

washington_universitywu-ftpdMatch2.4.2_beta18_vr11

washington_universitywu-ftpdMatch2.4.2_beta18_vr12

washington_universitywu-ftpdMatch2.4.2_beta18_vr13

washington_universitywu-ftpdMatch2.4.2_beta18_vr14

washington_universitywu-ftpdMatch2.4.2_beta18_vr15

washington_universitywu-ftpdMatch2.4.2_vr16

washington_universitywu-ftpdMatch2.4.2_vr17

washington_universitywu-ftpdMatch2.5.0

washington_universitywu-ftpdMatch2.6.0

washington_universitywu-ftpdMatch2.6.1

washington_universitywu-ftpdMatch2.6.2

VendorProductVersionCPE
gnufileutils4.0cpe:2.3:a:gnu:fileutils:4.0:*:*:*:*:*:*:*
gnufileutils4.0.36cpe:2.3:a:gnu:fileutils:4.0.36:*:*:*:*:*:*:*
gnufileutils4.1cpe:2.3:a:gnu:fileutils:4.1:*:*:*:*:*:*:*
gnufileutils4.1.6cpe:2.3:a:gnu:fileutils:4.1.6:*:*:*:*:*:*:*
gnufileutils4.1.7cpe:2.3:a:gnu:fileutils:4.1.7:*:*:*:*:*:*:*
washington_universitywu-ftpd2.4.1cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*
washington_universitywu-ftpd2.4.2_beta2cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2:*:academ:*:*:*:*:*
washington_universitywu-ftpd2.4.2_beta18cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*
washington_universitywu-ftpd2.4.2_beta18_vr4cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*
washington_universitywu-ftpd2.4.2_beta18_vr5cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gnu	fileutils	4.0	cpe:2.3:a:gnu:fileutils:4.0:::::::*
gnu	fileutils	4.0.36	cpe:2.3:a:gnu:fileutils:4.0.36:::::::*
gnu	fileutils	4.1	cpe:2.3:a:gnu:fileutils:4.1:::::::*
gnu	fileutils	4.1.6	cpe:2.3:a:gnu:fileutils:4.1.6:::::::*
gnu	fileutils	4.1.7	cpe:2.3:a:gnu:fileutils:4.1.7:::::::*
washington_university	wu-ftpd	2.4.1	cpe:2.3:a:washington_university:wu-ftpd:2.4.1:::::::*
washington_university	wu-ftpd	2.4.2_beta2	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2::academ:::::
washington_university	wu-ftpd	2.4.2_beta18	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18::academ:::::
washington_university	wu-ftpd	2.4.2_beta18_vr4	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:::::::*
washington_university	wu-ftpd	2.4.2_beta18_vr5	cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:::::::*

Rows per page:

1-10 of 261

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771

lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html

secunia.com/advisories/10126

secunia.com/advisories/17069

support.avaya.com/elmodocs2/security/ASA-2005-213.pdf

www.guninski.com/binls.html

www.mandriva.com/security/advisories?name=MDKSA-2003:106

www.redhat.com/support/errata/RHSA-2003-309.html

www.redhat.com/support/errata/RHSA-2003-310.html

www.securityfocus.com/advisories/6014

www.securityfocus.com/bid/8875

www.turbolinux.com/security/TLSA-2003-60.txt

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

Related for CVE-2003-0853