1. CVE-Search
  2. CVE-2003-0853
ID CVE-2003-0853
Summary An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
References
Vulnerable Configurations
  • cpe:2.3:a:gnu:fileutils:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:fileutils:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:gnu:fileutils:4.0.36:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:fileutils:4.0.36:*:*:*:*:*:*:*
  • cpe:2.3:a:gnu:fileutils:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:fileutils:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:gnu:fileutils:4.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:fileutils:4.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:gnu:fileutils:4.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:gnu:fileutils:4.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2:*:academ:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2:*:academ:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*
    cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-09-2008 - 19:20)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
  • rhsa
    id RHSA-2003:309
  • rhsa
    id RHSA-2003:310
refmap via4
bid 8875
conectiva
  • CLA-2003:768
  • CLA-2003:771
confirm http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf
fulldisc 20031022 Fun with /bin/ls, yet still ls better than windows
immunix IMNX-2003-7+-026-01
mandrake MDKSA-2003:106
misc http://www.guninski.com/binls.html
secunia
  • 10126
  • 17069
turbo TLSA-2003-60
Last major update 10-09-2008 - 19:20
Published 17-11-2003 - 05:00
Last modified 10-09-2008 - 19:20
Back to Top