Critical severity · published Aug 27, 2003
CVE-2003-0466
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0…
9.8
CVSS
78.1%
EPSS
No
On KEV
Description
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)78.1% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freebsd · Freebsd
4.0 through 5.0 · source: NVD
MO
Mac OS X · Apple
10.2.6 · source: NVD
MO
Mac OS X Server · Apple
10.2.6 · source: NVD
NE
Netbsd · Netbsd
1.5 through 1.6.1 · source: NVD
OP
Openbsd · Openbsd
2.0 through 3.3 · source: NVD
SO
Solaris · Sun
9.0 · source: NVD
WF
WU Ftpd · Redhat
2.6.1-16 · source: NVD
WU
Wu-ftpd · Wuftpd
2.5.0 through 2.6.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0466
Broken Link
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.html
Broken Link
http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01
Broken Link
http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txt
Mailing List
http://marc.info/?l=bugtraq&m=105967301604815&w=2
Mailing List
http://marc.info/?l=bugtraq&m=106001410028809&w=2
More from Mac OS X
9.8
CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
8.8
CVE-2022-2294
WebRTC Heap Buffer Overflow Vulnerability
8.8
CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability