CVE-2003-0853: gnu fileutils

EPSS trend

Probability

11.09%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 11.09% on 19-09-2026

19-09-202619-10-2026

EPSS score

11.09%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasedoslinuxVerified
Coreutils 4.5.x - LS Width Argument Integer Overflow
Maturity: poc

References

14 links

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771Vendor AdvisoryX Refsource CONECTIVA
support.avaya.com/elmodocs2/security/ASA-2005-213.pdfX Refsource CONFIRM
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768Vendor AdvisoryX Refsource CONECTIVA
lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.htmlMailing ListX Refsource FULLDISC
www.redhat.com/support/errata/RHSA-2003-309.htmlVendor AdvisoryX Refsource REDHAT
www.turbolinux.com/security/TLSA-2003-60.txtVendor AdvisoryX Refsource TURBO
www.redhat.com/support/errata/RHSA-2003-310.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/8875VDB EntryX Refsource BIDExploitPatchVendor Advisory
www.securityfocus.com/advisories/6014Vendor AdvisoryX Refsource IMMUNIX
secunia.com/advisories/17069Third Party AdvisoryX Refsource SECUNIA

Show all 14 references

www.guninski.com/binls.htmlX Refsource MISC
secunia.com/advisories/10126Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2003:106Vendor AdvisoryX Refsource MANDRAKE
security-tracker.debian.org/tracker/CVE-2003-0853Advisory

Related vulnerabilities

CVE-2003-1329washington_universitywu-ftpd1.27%19y ago21-05-2007 20:00ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same local address," does not close failed connections, which allows remote attackers to cause a denial of service.CVE-2003-1327washington_universitywu-ftpd3.29%19y ago15-05-2007 10:00Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.CVE-2003-0854debiancoreutils+21.11%23y ago25-10-2003 04:00ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.CVE-2001-0935washington_universitywu-ftpd1.48%24y ago02-02-2002 05:00Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.CVE-2001-0550david_madoreftpd-bsd+174.65%24y ago25-06-2002 04:00wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).CVE-2001-0187washington_universitywu-ftpd5.67%25y ago07-05-2001 04:00Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.

All vulnerabilities infileutils wu-ftpd

CVE-2003-0853: gnu fileutils

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References