CVEvulnerability

CVE-2004-0148

7.2 HIGH Published 2004-04-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-04-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Affected configurations

• sgi propack 2.3 • sgi propack 2.4 • washington university wu-ftpd 2.4.1 • washington university wu-ftpd 2.4.2 beta2 • washington university wu-ftpd 2.4.2 beta18 • washington university wu-ftpd 2.4.2 beta18 vr4 • washington university wu-ftpd 2.4.2 beta18 vr5 • washington university wu-ftpd 2.4.2 beta18 vr6 • washington university wu-ftpd 2.4.2 beta18 vr7 • washington university wu-ftpd 2.4.2 beta18 vr8 • washington university wu-ftpd 2.4.2 beta18 vr9 • washington university wu-ftpd 2.4.2 beta18 vr10 • washington university wu-ftpd 2.4.2 beta18 vr11 • washington university wu-ftpd 2.4.2 beta18 vr12 • washington university wu-ftpd 2.4.2 beta18 vr13 • washington university wu-ftpd 2.4.2 beta18 vr14 • washington university wu-ftpd 2.4.2 beta18 vr15 • washington university wu-ftpd 2.4.2 vr16 • washington university wu-ftpd 2.4.2 vr17 • washington university wu-ftpd 2.5.0 • washington university wu-ftpd 2.6.0 • washington university wu-ftpd 2.6.1 • washington university wu-ftpd 2.6.2

Related

Referenced by CWE · observed example (1)

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges weakness

References