// For flags

CVE-2004-0148

 

Severity Score

7.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

wu-ftpd 2.6.2 y anteriores, con la opción restricted-gid activada, permite a usuarios locales saltarse restricciones de acceso cambiando los permisos para impedir el acceso a su directorio home, lo que hace que wu-ftpd use el directorio raíz en su lugar.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-02-13 CVE Reserved
  • 2004-04-15 CVE Published
  • 2024-08-08 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Sgi
Search vendor "Sgi"
Propack
Search vendor "Sgi" for product "Propack"
2.3
Search vendor "Sgi" for product "Propack" and version "2.3"
-
Affected
Sgi
Search vendor "Sgi"
Propack
Search vendor "Sgi" for product "Propack"
2.4
Search vendor "Sgi" for product "Propack" and version "2.4"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.1
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.1"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta2
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta2"
academ
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18"
academ
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr4
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr4"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr5
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr5"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr6
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr6"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr7
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr7"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr8
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr8"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr9
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr9"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr10
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr10"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr11
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr11"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr12
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr12"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr13
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr13"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr14
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr14"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_beta18_vr15
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr15"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_vr16
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr16"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.4.2_vr17
Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr17"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.5.0
Search vendor "Washington University" for product "Wu-ftpd" and version "2.5.0"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.6.0
Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.0"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.6.1
Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.1"
-
Affected
Washington University
Search vendor "Washington University"
Wu-ftpd
Search vendor "Washington University" for product "Wu-ftpd"
2.6.2
Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.2"
-
Affected