CVE-2003-0466
CRITICAL 9.8EPSS 78.1%
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 78.11% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2003-08-01
- Updated
- 2024-08-08
Proof-of-concept exploits (3)
- http://www.securityfocus.com/archive/1/424852/100/0/threaded
- http://www.securityfocus.com/archive/1/425061/100/0/threaded
- http://marc.info/?l=bugtraq&m=106001702232325&w=2
ExploitDB entries (5)
- https://www.exploit-db.com/exploits/22976
- https://www.exploit-db.com/exploits/22975
- https://www.exploit-db.com/exploits/22974
- https://www.exploit-db.com/exploits/78
- https://www.exploit-db.com/exploits/74
Security advisories
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.html
- http://www.securityfocus.com/bid/8315
- http://securitytracker.com/id?1007380
- http://www.kb.cert.org/vuls/id/743092
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:080
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12785
- http://www.redhat.com/support/errata/RHSA-2003-245.html
- http://www.redhat.com/support/errata/RHSA-2003-246.html