Lucene search

[email protected]NVD:CVE-2003-0853

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0853

2003-11-1705:00:00

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

JSON

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Affected configurations

NVD

Node

gnufileutilsMatch4.0

gnufileutilsMatch4.0.36

gnufileutilsMatch4.1

gnufileutilsMatch4.1.6

gnufileutilsMatch4.1.7

washington_universitywu-ftpdMatch2.4.1

washington_universitywu-ftpdMatch2.4.2_beta2academ

washington_universitywu-ftpdMatch2.4.2_beta18academ

washington_universitywu-ftpdMatch2.4.2_beta18_vr4

washington_universitywu-ftpdMatch2.4.2_beta18_vr5

washington_universitywu-ftpdMatch2.4.2_beta18_vr6

washington_universitywu-ftpdMatch2.4.2_beta18_vr7

washington_universitywu-ftpdMatch2.4.2_beta18_vr8

washington_universitywu-ftpdMatch2.4.2_beta18_vr9

washington_universitywu-ftpdMatch2.4.2_beta18_vr10

washington_universitywu-ftpdMatch2.4.2_beta18_vr11

washington_universitywu-ftpdMatch2.4.2_beta18_vr12

washington_universitywu-ftpdMatch2.4.2_beta18_vr13

washington_universitywu-ftpdMatch2.4.2_beta18_vr14

washington_universitywu-ftpdMatch2.4.2_beta18_vr15

washington_universitywu-ftpdMatch2.4.2_vr16

washington_universitywu-ftpdMatch2.4.2_vr17

washington_universitywu-ftpdMatch2.5.0

washington_universitywu-ftpdMatch2.6.0

washington_universitywu-ftpdMatch2.6.1

washington_universitywu-ftpdMatch2.6.2

References

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771

lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html

secunia.com/advisories/10126

secunia.com/advisories/17069

support.avaya.com/elmodocs2/security/ASA-2005-213.pdf

www.guninski.com/binls.html

www.mandriva.com/security/advisories?name=MDKSA-2003:106

www.redhat.com/support/errata/RHSA-2003-309.html

www.redhat.com/support/errata/RHSA-2003-310.html

www.securityfocus.com/advisories/6014

www.securityfocus.com/bid/8875

www.turbolinux.com/security/TLSA-2003-60.txt

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

JSON

Related for NVD:CVE-2003-0853

cve1 nessus4 cvelist1 debiancve1 redhat1 openvas2