Lucene search

[email protected]CVE-2003-0854

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0854

2003-11-1705:00:00

[email protected]

web.nvd.nist.gov

cve-2003-0854

fileutils

coreutils

memory consumption

wu-ftpd

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Affected configurations

NVD

Node

gnufileutilsMatch4.0

gnufileutilsMatch4.0.36

gnufileutilsMatch4.1

gnufileutilsMatch4.1.6

gnufileutilsMatch4.1.7

washington_universitywu-ftpdMatch2.4.1

washington_universitywu-ftpdMatch2.4.2_beta2academ

washington_universitywu-ftpdMatch2.4.2_beta18academ

washington_universitywu-ftpdMatch2.4.2_beta18_vr4

washington_universitywu-ftpdMatch2.4.2_beta18_vr5

washington_universitywu-ftpdMatch2.4.2_beta18_vr6

washington_universitywu-ftpdMatch2.4.2_beta18_vr7

washington_universitywu-ftpdMatch2.4.2_beta18_vr8

washington_universitywu-ftpdMatch2.4.2_beta18_vr9

washington_universitywu-ftpdMatch2.4.2_beta18_vr10

washington_universitywu-ftpdMatch2.4.2_beta18_vr11

washington_universitywu-ftpdMatch2.4.2_beta18_vr12

washington_universitywu-ftpdMatch2.4.2_beta18_vr13

washington_universitywu-ftpdMatch2.4.2_beta18_vr14

washington_universitywu-ftpdMatch2.4.2_beta18_vr15

washington_universitywu-ftpdMatch2.4.2_vr16

washington_universitywu-ftpdMatch2.4.2_vr17

washington_universitywu-ftpdMatch2.5.0

washington_universitywu-ftpdMatch2.6.0

washington_universitywu-ftpdMatch2.6.1

washington_universitywu-ftpdMatch2.6.2

CPENameOperatorVersion
gnu:fileutilsgnu fileutilseq4.0
gnu:fileutilsgnu fileutilseq4.0.36
gnu:fileutilsgnu fileutilseq4.1
gnu:fileutilsgnu fileutilseq4.1.6
gnu:fileutilsgnu fileutilseq4.1.7
washington_university:wu-ftpdwashington university wu-ftpdeq2.4.1
washington_university:wu-ftpdwashington university wu-ftpdeq2.4.2_beta2
washington_university:wu-ftpdwashington university wu-ftpdeq2.4.2_beta18
washington_university:wu-ftpdwashington university wu-ftpdeq2.4.2_beta18_vr4
washington_university:wu-ftpdwashington university wu-ftpdeq2.4.2_beta18_vr5

CPE	Name	Operator	Version
gnu:fileutils	gnu fileutils	eq	4.0
gnu:fileutils	gnu fileutils	eq	4.0.36
gnu:fileutils	gnu fileutils	eq	4.1
gnu:fileutils	gnu fileutils	eq	4.1.6
gnu:fileutils	gnu fileutils	eq	4.1.7
washington_university:wu-ftpd	washington university wu-ftpd	eq	2.4.1
washington_university:wu-ftpd	washington university wu-ftpd	eq	2.4.2_beta2
washington_university:wu-ftpd	washington university wu-ftpd	eq	2.4.2_beta18
washington_university:wu-ftpd	washington university wu-ftpd	eq	2.4.2_beta18_vr4
washington_university:wu-ftpd	washington university wu-ftpd	eq	2.4.2_beta18_vr5