CVE-2003-0853

medium · 5

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

CVSS

11.1%

EPSS (exploit prob.)

96th

EPSS percentile

2003-11-17

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Vendor	Product	Affected versions
gnu	fileutils	4.0
gnu	fileutils	4.0.36
gnu	fileutils	4.1
gnu	fileutils	4.1.6
gnu	fileutils	4.1.7
washington_university	wu-ftpd	2.4.1
washington_university	wu-ftpd	2.4.2_beta2
washington_university	wu-ftpd	2.4.2_beta18
washington_university	wu-ftpd	2.4.2_beta18_vr4
washington_university	wu-ftpd	2.4.2_beta18_vr5
washington_university	wu-ftpd	2.4.2_beta18_vr6
washington_university	wu-ftpd	2.4.2_beta18_vr7
washington_university	wu-ftpd	2.4.2_beta18_vr8
washington_university	wu-ftpd	2.4.2_beta18_vr9
washington_university	wu-ftpd	2.4.2_beta18_vr10
washington_university	wu-ftpd	2.4.2_beta18_vr11
washington_university	wu-ftpd	2.4.2_beta18_vr12
washington_university	wu-ftpd	2.4.2_beta18_vr13
washington_university	wu-ftpd	2.4.2_beta18_vr14
washington_university	wu-ftpd	2.4.2_beta18_vr15
washington_university	wu-ftpd	2.4.2_vr16
washington_university	wu-ftpd	2.4.2_vr17
washington_university	wu-ftpd	2.5.0
washington_university	wu-ftpd	2.6.0
washington_university	wu-ftpd	2.6.1
washington_university	wu-ftpd	2.6.2

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0853