CVE-2003-0853

Coreutils 4.5.x - LS Width Argument Integer Overflow

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Un desbordamiento de enteros en ls en los paquetes fileutils o coreutils puede permitir a usuarios locales causar una denegación de servicio o ejecutar código arbitrario mediante un valor -w, lo que podría ser explotado remotamente mediante aplicaciones que usan ls, como wu-ftpd.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2003-10-10 CVE Reserved
2003-10-22 First Exploit
2003-10-25 CVE Published
2024-04-04 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (16)

URL	Tag	Source
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html	Mailing List
http://secunia.com/advisories/10126	Third Party Advisory
http://secunia.com/advisories/17069	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf	X_refsource_confirm
http://www.guninski.com/binls.html	X_refsource_misc

URL	Date	SRC
https://www.exploit-db.com/exploits/23274	2003-10-22
http://www.securityfocus.com/bid/8875	2024-08-08

URL	Date	SRC

URL	Date	SRC
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000768	2008-09-10
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000771	2008-09-10
http://www.mandriva.com/security/advisories?name=MDKSA-2003:106	2008-09-10
http://www.redhat.com/support/errata/RHSA-2003-309.html	2008-09-10
http://www.redhat.com/support/errata/RHSA-2003-310.html	2008-09-10
http://www.securityfocus.com/advisories/6014	2008-09-10
http://www.turbolinux.com/security/TLSA-2003-60.txt	2008-09-10
https://access.redhat.com/security/cve/CVE-2003-0853	2003-11-12
https://bugzilla.redhat.com/show_bug.cgi?id=1617091	2003-11-12

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Gnu Search vendor "Gnu"		Fileutils Search vendor "Gnu" for product "Fileutils"				4.0 Search vendor "Gnu" for product "Fileutils" and version "4.0"		-		Affected
Gnu Search vendor "Gnu"		Fileutils Search vendor "Gnu" for product "Fileutils"				4.0.36 Search vendor "Gnu" for product "Fileutils" and version "4.0.36"		-		Affected
Gnu Search vendor "Gnu"		Fileutils Search vendor "Gnu" for product "Fileutils"				4.1 Search vendor "Gnu" for product "Fileutils" and version "4.1"		-		Affected
Gnu Search vendor "Gnu"		Fileutils Search vendor "Gnu" for product "Fileutils"				4.1.6 Search vendor "Gnu" for product "Fileutils" and version "4.1.6"		-		Affected
Gnu Search vendor "Gnu"		Fileutils Search vendor "Gnu" for product "Fileutils"				4.1.7 Search vendor "Gnu" for product "Fileutils" and version "4.1.7"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.1 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.1"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta2 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta2"		academ		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18"		academ		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr4 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr4"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr5 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr5"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr6 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr6"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr7 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr7"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr8 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr8"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr9 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr9"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr10 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr10"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr11 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr11"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr12 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr12"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr13 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr13"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr14 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr14"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr15 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr15"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_vr16 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr16"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_vr17 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr17"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.5.0 Search vendor "Washington University" for product "Wu-ftpd" and version "2.5.0"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.0 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.0"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.1 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.1"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.2 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.2"		-		Affected