NVD

Id
73593  
Name
CVE-2003-0466  
Description
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2003-08-27  
Modified Date
2017-07-10  
Seq
2003-0466  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378773 73593 CVE-2003-0466 NetBSD-SA2003-011.txt.asc  View
378774 73593 CVE-2003-0466 20030731 wu-ftpd fb_realpath() off-by-one bug  View
378775 73593 CVE-2003-0466 IMNX-2003-7+-019-01  View
378776 73593 CVE-2003-0466 http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txt  View
378777 73593 CVE-2003-0466 20030731 wu-ftpd fb_realpath() off-by-one bug  View
378778 73593 CVE-2003-0466 FreeBSD-SA-03:08  View
378779 73593 CVE-2003-0466 20030804 wu-ftpd-2.6.2 off-by-one remote exploit.  View
378780 73593 CVE-2003-0466 20030804 Off-by-one Buffer Overflow Vulnerability in BSD libc realpath(3)  View
378781 73593 CVE-2003-0466 oval:org.mitre.oval:def:1970  View
378782 73593 CVE-2003-0466 1007380  View
378783 73593 CVE-2003-0466 1001257  View
378784 73593 CVE-2003-0466 DSA-357  View
378785 73593 CVE-2003-0466 VU#743092  View
378786 73593 CVE-2003-0466 MDKSA-2003:080  View
378787 73593 CVE-2003-0466 SuSE-SA:2003:032  View
378788 73593 CVE-2003-0466 RHSA-2003:245  View
378789 73593 CVE-2003-0466 RHSA-2003:246  View
378790 73593 CVE-2003-0466 20060213 Latest wu-ftpd exploit :-s  View
378791 73593 CVE-2003-0466 20060214 Re: Latest wu-ftpd exploit :-s  View
378792 73593 CVE-2003-0466 8315  View
378793 73593 CVE-2003-0466 TLSA-2003-46  View
378794 73593 CVE-2003-0466 libc-realpath-offbyone-bo(12785)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63511 JVNDB-2003-000237 WU-FTPD の fb_realpath() 関数における一つずれによるバッファオーバーフローの脆弱性 WU-FTPD に実装されている fb_realpath() 関数では、パスを取り扱うためのバッファのサイズが MAXPATHLEN しか割り当てられていないにも関わらず、実際に引き渡されるパスの長さがそれ以上 (MAXPATHLEN+1) である場合に、一つずれ (off-by-one) によるバッファオーバーフローが発生する脆弱性が存在します。 CVE-2003-0466 7292 CVE-2003-0466 73593 10 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000237.html 2003-07-31 2007-04-01 View