CVE-2003-0853 Integer overflow in n/a
Integer overflow in ls allows remote attackers to execute arbitrary code or cause denial of service via large width values, particularly when used by network services like wu-ftpd.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0853?
CVE-2003-0853 is a medium-severity vulnerability in n/a, published on 25 Oct 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Which versions are affected by CVE-2003-0853?
It affects 2 products.
Products include Gnu Fileutils, Washington University Wu-Ftpd.
How do I fix CVE-2003-0853?
Upgrade to a fixed version.
Is CVE-2003-0853 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0853 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2003-0853, GHSA-5rh2-8gqg-243p.