CVE-2003-0963 Memory corruption in n/a

High 7.5 Published 17 Dec 2003 Updated 8 Aug 2024

Remote HTTP servers can execute arbitrary code on lftp clients via buffer overflows in directory listing commands.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2003-0963?

CVE-2003-0963 is a high-severity memory corruption vulnerability in n/a, published on 17 Dec 2003. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands.

Which versions are affected by CVE-2003-0963?

It affects 1 product.

Linux distribution packages (8)

`lftp` Red Hat:enterprise_linux:3::as	All versions	`0:2.6.3-5`
`lftp-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`0:2.6.3-5`
`lftp` Red Hat:enterprise_linux:3::desktop	All versions	`0:2.6.3-5`
`lftp-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`0:2.6.3-5`
`lftp` Red Hat:enterprise_linux:3::es	All versions	`0:2.6.3-5`
`lftp-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`0:2.6.3-5`
`lftp` Red Hat:enterprise_linux:3::ws	All versions	`0:2.6.3-5`
`lftp-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`0:2.6.3-5`

Products include Alexander v. Lukyanov Lftp.

How do I fix CVE-2003-0963?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2003-0963 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0963 exists.

Public exploit code: 1 Exploit-DB entry.

Sources

Also known as DEBIAN-CVE-2003-0963, DSA-406, GHSA-pv7m-39mr-v2jm, RHSA-2003:404.