CVEvulnerability

CVE-2003-0854

2.1 LOW Published 2003-11-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-11-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P

Description

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Affected configurations

• gnu fileutils 4.0 • gnu fileutils 4.0.36 • gnu fileutils 4.1 • gnu fileutils 4.1.6 • gnu fileutils 4.1.7 • washington university wu-ftpd 2.4.1 • washington university wu-ftpd 2.4.2 beta2 • washington university wu-ftpd 2.4.2 beta18 • washington university wu-ftpd 2.4.2 beta18 vr4 • washington university wu-ftpd 2.4.2 beta18 vr5 • washington university wu-ftpd 2.4.2 beta18 vr6 • washington university wu-ftpd 2.4.2 beta18 vr7 • washington university wu-ftpd 2.4.2 beta18 vr8 • washington university wu-ftpd 2.4.2 beta18 vr9 • washington university wu-ftpd 2.4.2 beta18 vr10 • washington university wu-ftpd 2.4.2 beta18 vr11 • washington university wu-ftpd 2.4.2 beta18 vr12 • washington university wu-ftpd 2.4.2 beta18 vr13 • washington university wu-ftpd 2.4.2 beta18 vr14 • washington university wu-ftpd 2.4.2 beta18 vr15 • washington university wu-ftpd 2.4.2 vr16 • washington university wu-ftpd 2.4.2 vr17 • washington university wu-ftpd 2.5.0 • washington university wu-ftpd 2.6.0 • washington university wu-ftpd 2.6.1 • washington university wu-ftpd 2.6.2

References