← back
CVE-2003-0466

CVE-2003-0466

EPSS 78.1%
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
Affected products
n/a · n/a
public PoCs found — 5
exploitdbwww.exploit-db.com/exploits/22976unverifiedexploitdbwww.exploit-db.com/exploits/74unverifiedexploitdbwww.exploit-db.com/exploits/78unverifiedexploitdbwww.exploit-db.com/exploits/22975unverifiedexploitdbwww.exploit-db.com/exploits/22974unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-011.txt.aschttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.htmlhttp://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txthttp://marc.info/?l=bugtraq&m=105967301604815&w=2http://marc.info/?l=bugtraq&m=106001410028809&w=2http://marc.info/?l=bugtraq&m=106001702232325&w=2http://marc.info/?l=bugtraq&m=106002488209129&w=2http://secunia.com/advisories/9423http://secunia.com/advisories/9446http://secunia.com/advisories/9447http://secunia.com/advisories/9535