CVE-2003-0853
CVE-2003-0853
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
EPSS 11.1% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771
- http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html
- http://www.redhat.com/support/errata/RHSA-2003-309.html
- http://www.turbolinux.com/security/TLSA-2003-60.txt
- http://www.redhat.com/support/errata/RHSA-2003-310.html
- http://www.securityfocus.com/bid/8875
- http://www.securityfocus.com/advisories/6014
- http://secunia.com/advisories/17069
- http://www.guninski.com/binls.html
- http://secunia.com/advisories/10126
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:106
- https://nvd.nist.gov/vuln/detail/CVE-2003-0853