2.1
CVSSv2

CVE-2003-0854

Published: 17/11/2003 Updated: 11/10/2017
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Vulnerable Product Search on Vulmon Subscribe to Product

gnu fileutils 4.0

washington university wu-ftpd 2.4.2 beta18

washington university wu-ftpd 2.4.2 beta18 vr14

washington university wu-ftpd 2.5.0

washington university wu-ftpd 2.4.2 vr17

washington university wu-ftpd 2.4.2 beta18 vr9

gnu fileutils 4.0.36

washington university wu-ftpd 2.4.1

gnu fileutils 4.1

gnu fileutils 4.1.7

washington university wu-ftpd 2.4.2 vr16

washington university wu-ftpd 2.6.2

washington university wu-ftpd 2.6.0

washington university wu-ftpd 2.4.2 beta18 vr11

washington university wu-ftpd 2.4.2 beta18 vr6

gnu fileutils 4.1.6

washington university wu-ftpd 2.4.2 beta18 vr4

washington university wu-ftpd 2.4.2 beta18 vr12

washington university wu-ftpd 2.4.2 beta18 vr5

washington university wu-ftpd 2.4.2 beta18 vr13

washington university wu-ftpd 2.4.2 beta18 vr10

washington university wu-ftpd 2.4.2 beta18 vr15

washington university wu-ftpd 2.6.1

washington university wu-ftpd 2.4.2 beta2

washington university wu-ftpd 2.4.2 beta18 vr7

washington university wu-ftpd 2.4.2 beta18 vr8

Exploits

/* * (c) Rosiello Security * * Copyright Rosiello Security 2003 * All Rights reserved * * Tested on Red Hat 90 * * Author: Angelo Rosiello * Mail : angelo rosiello org * This software is only for educational purpose * Do not use it against machines different from yours * Respect law * */ #include <stdioh> #include <sys/types ...