CVE-2004-0148

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

wu-ftpd 2.6.2 y anteriores, con la opción restricted-gid activada, permite a usuarios locales saltarse restricciones de acceso cambiando los permisos para impedir el acceso a su directorio home, lo que hace que wu-ftpd use el directorio raíz en su lugar.

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-02-13 CVE Reserved
2004-04-15 CVE Published
2023-03-08 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (15)

URL	Tag	Source
http://secunia.com/advisories/11055	Third Party Advisory
http://secunia.com/advisories/20168	Third Party Advisory
http://www.frsirt.com/english/advisories/2006/1867	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15423	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648	Signature

URL	Date	SRC

URL	Date	SRC
http://www.debian.org/security/2004/dsa-457	2018-05-03
http://www.redhat.com/support/errata/RHSA-2004-096.html	2018-05-03
http://www.securityfocus.com/bid/9832	2018-05-03

URL	Date	SRC
http://marc.info/?l=bugtraq&m=108999466902690&w=2	2018-05-03
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1	2018-05-03
https://access.redhat.com/security/cve/CVE-2004-0148	2004-03-08
https://bugzilla.redhat.com/show_bug.cgi?id=1617160	2004-03-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Sgi Search vendor "Sgi"		Propack Search vendor "Sgi" for product "Propack"				2.3 Search vendor "Sgi" for product "Propack" and version "2.3"		-		Affected
Sgi Search vendor "Sgi"		Propack Search vendor "Sgi" for product "Propack"				2.4 Search vendor "Sgi" for product "Propack" and version "2.4"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.1 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.1"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta2 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta2"		academ		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18"		academ		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr4 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr4"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr5 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr5"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr6 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr6"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr7 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr7"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr8 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr8"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr9 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr9"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr10 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr10"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr11 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr11"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr12 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr12"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr13 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr13"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr14 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr14"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_beta18_vr15 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_beta18_vr15"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_vr16 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr16"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.4.2_vr17 Search vendor "Washington University" for product "Wu-ftpd" and version "2.4.2_vr17"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.5.0 Search vendor "Washington University" for product "Wu-ftpd" and version "2.5.0"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.0 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.0"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.1 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.1"		-		Affected
Washington University Search vendor "Washington University"		Wu-ftpd Search vendor "Washington University" for product "Wu-ftpd"				2.6.2 Search vendor "Washington University" for product "Wu-ftpd" and version "2.6.2"		-		Affected