CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0466

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.853

EPSS Ranking 99.3%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2003-0466

Redhat » Wu Ftpd » Version: 2.6.1-16

cpe:2.3:a:redhat:wu_ftpd:2.6.1-16
Wuftpd » Wu-Ftpd » Version: 2.5.0

cpe:2.3:a:wuftpd:wu-ftpd:2.5.0
Wuftpd » Wu-Ftpd » Version: 2.6.2

cpe:2.3:a:wuftpd:wu-ftpd:2.6.2
Apple » Mac Os X » Version: 10.2.6

cpe:2.3:o:apple:mac_os_x:10.2.6
Apple » Mac Os X Server » Version: 10.2.6

cpe:2.3:o:apple:mac_os_x_server:10.2.6
Freebsd » Freebsd » Version: 4.0

cpe:2.3:o:freebsd:freebsd:4.0
Freebsd » Freebsd » Version: 4.1

cpe:2.3:o:freebsd:freebsd:4.1
Freebsd » Freebsd » Version: 4.1.1

cpe:2.3:o:freebsd:freebsd:4.1.1
Freebsd » Freebsd » Version: 4.10

cpe:2.3:o:freebsd:freebsd:4.10
Freebsd » Freebsd » Version: 4.11

cpe:2.3:o:freebsd:freebsd:4.11
Freebsd » Freebsd » Version: 4.2

cpe:2.3:o:freebsd:freebsd:4.2
Freebsd » Freebsd » Version: 4.3

cpe:2.3:o:freebsd:freebsd:4.3
Freebsd » Freebsd » Version: 4.4

cpe:2.3:o:freebsd:freebsd:4.4
Freebsd » Freebsd » Version: 4.5

cpe:2.3:o:freebsd:freebsd:4.5
Freebsd » Freebsd » Version: 4.6

cpe:2.3:o:freebsd:freebsd:4.6
Freebsd » Freebsd » Version: 4.6.1

cpe:2.3:o:freebsd:freebsd:4.6.1
Freebsd » Freebsd » Version: 4.6.2

cpe:2.3:o:freebsd:freebsd:4.6.2
Freebsd » Freebsd » Version: 4.7

cpe:2.3:o:freebsd:freebsd:4.7
Freebsd » Freebsd » Version: 4.8

cpe:2.3:o:freebsd:freebsd:4.8
Freebsd » Freebsd » Version: 4.9

cpe:2.3:o:freebsd:freebsd:4.9
Freebsd » Freebsd » Version: 5.0

cpe:2.3:o:freebsd:freebsd:5.0
Netbsd » Netbsd » Version: 1.5

cpe:2.3:o:netbsd:netbsd:1.5
Netbsd » Netbsd » Version: 1.5.1

cpe:2.3:o:netbsd:netbsd:1.5.1
Netbsd » Netbsd » Version: 1.5.2

cpe:2.3:o:netbsd:netbsd:1.5.2
Netbsd » Netbsd » Version: 1.5.3

cpe:2.3:o:netbsd:netbsd:1.5.3
Netbsd » Netbsd » Version: 1.6

cpe:2.3:o:netbsd:netbsd:1.6
Netbsd » Netbsd » Version: 1.6.1

cpe:2.3:o:netbsd:netbsd:1.6.1
Openbsd » Openbsd » Version: 2.0

cpe:2.3:o:openbsd:openbsd:2.0
Openbsd » Openbsd » Version: 2.1

cpe:2.3:o:openbsd:openbsd:2.1
Openbsd » Openbsd » Version: 2.2

cpe:2.3:o:openbsd:openbsd:2.2
Openbsd » Openbsd » Version: 2.3

cpe:2.3:o:openbsd:openbsd:2.3
Openbsd » Openbsd » Version: 2.4

cpe:2.3:o:openbsd:openbsd:2.4
Openbsd » Openbsd » Version: 2.5

cpe:2.3:o:openbsd:openbsd:2.5
Openbsd » Openbsd » Version: 2.6

cpe:2.3:o:openbsd:openbsd:2.6
Openbsd » Openbsd » Version: 2.7

cpe:2.3:o:openbsd:openbsd:2.7
Openbsd » Openbsd » Version: 2.8

cpe:2.3:o:openbsd:openbsd:2.8
Openbsd » Openbsd » Version: 2.9

cpe:2.3:o:openbsd:openbsd:2.9
Openbsd » Openbsd » Version: 3.0

cpe:2.3:o:openbsd:openbsd:3.0
Openbsd » Openbsd » Version: 3.1

cpe:2.3:o:openbsd:openbsd:3.1
Openbsd » Openbsd » Version: 3.2

cpe:2.3:o:openbsd:openbsd:3.2
Openbsd » Openbsd » Version: 3.3

cpe:2.3:o:openbsd:openbsd:3.3
Sun » Solaris » Version: 9.0

cpe:2.3:o:sun:solaris:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0466

Products

Pricing

Contact Us