CVEvulnerability

CVE-2003-0466

9.8 CRITICAL Published 2003-08-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-08-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-193

Description

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.

Affected configurations

• redhat wu ftpd 2.6.1-16 • wuftpd wu-ftpd (>= 2.5.0 <= 2.6.2) • apple mac os x 10.2.6 • apple mac os x server 10.2.6 • freebsd freebsd (>= 4.0 <= 5.0) • netbsd netbsd (>= 1.5 <= 1.6.1) • openbsd openbsd (>= 2.0 <= 3.3) • sun solaris 9.0

Related

Weakness · CWE (1)

  • CWE-193 Off-by-one Error weakness

Referenced by CWE · observed example (1)

  • CWE-193 Off-by-one Error weakness

References