CVE-2003-0466: Buffer Overflow
First published: Fri Aug 01 2003(Updated: )
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Wu Ftpd | =2.6.1-16 | |
| Wuftpd Wu-ftpd | >=2.5.0<=2.6.2 | |
| Apple Mac OS X | =10.2.6 | |
| Apple Mac OS X Server | =10.2.6 | |
| FreeBSD FreeBSD | >=4.0<=5.0 | |
| NetBSD NetBSD | >=1.5<=1.6.1 | |
| Openbsd Openbsd | >=2.0<=3.3 | |
| Sun Solaris | =9.0 | |
| Redhat Wu Ftpd | =2.6.1-18 | |
| Washington University Wu-ftpd | =2.5.0 | |
| Redhat Wu Ftpd | =2.6.1-18 | |
| Redhat Wu Ftpd | =2.6.2-5 | |
| Washington University Wu-ftpd | =2.6.2 | |
| Washington University Wu-ftpd | =2.6.0 | |
| Redhat Wu Ftpd | =2.6.1-16 | |
| Redhat Wu Ftpd | =2.6.2-8 | |
| Redhat Wu Ftpd | =2.6.1-16 | |
| Washington University Wu-ftpd | =2.6.1 | |
| FreeBSD FreeBSD | =4.3-releng | |
| NetBSD NetBSD | =1.5.3 | |
| FreeBSD FreeBSD | =4.1.1-stable | |
| NetBSD NetBSD | =1.6 | |
| Openbsd Openbsd | =2.8 | |
| FreeBSD FreeBSD | =4.1.1-release | |
| NetBSD NetBSD | =1.5 | |
| FreeBSD FreeBSD | =4.4-stable | |
| FreeBSD FreeBSD | =4.6-stable | |
| FreeBSD FreeBSD | =4.7 | |
| Openbsd Openbsd | =2.2 | |
| Openbsd Openbsd | =3.1 | |
| FreeBSD FreeBSD | =4.2-stable | |
| FreeBSD FreeBSD | =4.5 | |
| FreeBSD FreeBSD | =4.7-stable | |
| Openbsd Openbsd | =3.3 | |
| FreeBSD FreeBSD | =4.3-stable | |
| FreeBSD FreeBSD | =4.6-release | |
| Openbsd Openbsd | =2.0 | |
| Openbsd Openbsd | =2.1 | |
| Openbsd Openbsd | =2.9 | |
| FreeBSD FreeBSD | =4.3-release | |
| FreeBSD FreeBSD | =4.5-release | |
| FreeBSD FreeBSD | =4.5-stable | |
| NetBSD NetBSD | =1.6.1 | |
| Openbsd Openbsd | =2.7 | |
| Sun Solaris | =9.0 | |
| FreeBSD FreeBSD | =4.4 | |
| FreeBSD FreeBSD | =4.4-releng | |
| NetBSD NetBSD | =1.5.1 | |
| Openbsd Openbsd | =2.3 | |
| Openbsd Openbsd | =3.2 | |
| FreeBSD FreeBSD | =4.2 | |
| FreeBSD FreeBSD | =4.7-release | |
| NetBSD NetBSD | =1.5.2 | |
| Openbsd Openbsd | =2.4 | |
| Openbsd Openbsd | =2.5 | |
| Sun Solaris | =9.0 | |
| FreeBSD FreeBSD | =4.1 | |
| FreeBSD FreeBSD | =4.1.1 | |
| FreeBSD FreeBSD | =4.6 | |
| FreeBSD FreeBSD | =4.6.2 | |
| FreeBSD FreeBSD | =5.0 | |
| FreeBSD FreeBSD | =5.0-alpha | |
| Openbsd Openbsd | =3.0 | |
| FreeBSD FreeBSD | =4.0 | |
| FreeBSD FreeBSD | =4.0-alpha | |
| FreeBSD FreeBSD | =4.3 | |
| FreeBSD FreeBSD | =4.8 | |
| FreeBSD FreeBSD | =4.8-pre-release | |
| Openbsd Openbsd | =2.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/8315
- http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.html
- http://www.kb.cert.org/vuls/id/743092
- http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txt
- http://www.redhat.com/support/errata/RHSA-2003-245.html
- http://www.redhat.com/support/errata/RHSA-2003-246.html
- http://www.novell.com/linux/security/advisories/2003_032_wuftpd.html
- http://www.debian.org/security/2003/dsa-357
- http://www.turbolinux.com/security/TLSA-2003-46.txt
- http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01
- http://www.osvdb.org/6602
- http://securitytracker.com/id?1007380
- http://secunia.com/advisories/9423
- http://secunia.com/advisories/9446
- http://secunia.com/advisories/9447
- http://secunia.com/advisories/9535
- http://www.securityfocus.com/archive/1/424852/100/0/threaded
- http://www.securityfocus.com/archive/1/425061/100/0/threaded
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:080
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001257.1-1
- http://marc.info/?l=bugtraq&m=106001702232325&w=2
- http://marc.info/?l=bugtraq&m=105967301604815&w=2
- http://marc.info/?l=bugtraq&m=106002488209129&w=2
- http://marc.info/?l=bugtraq&m=106001410028809&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12785
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1970
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/remedy
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/redhat
- canonical/redhat wu ftpd
- version/redhat wu ftpd/2.6.1-16
- vendor/wuftpd
- canonical/wuftpd wu-ftpd
- version/wuftpd wu-ftpd/2.5.0
- version/wuftpd wu-ftpd/2.6.2
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.2.6
- canonical/apple mac os x server
- version/apple mac os x server/10.2.6
- vendor/freebsd
- canonical/freebsd freebsd
- version/freebsd freebsd/4.0
- version/freebsd freebsd/5.0
- vendor/netbsd
- canonical/netbsd netbsd
- version/netbsd netbsd/1.5
- version/netbsd netbsd/1.6.1
- vendor/openbsd
- canonical/openbsd openbsd
- version/openbsd openbsd/2.0
- version/openbsd openbsd/3.3
- vendor/sun
- canonical/sun solaris
- version/sun solaris/9.0
- version/redhat wu ftpd/2.6.1-18
- vendor/washington university
- canonical/washington university wu-ftpd
- version/washington university wu-ftpd/2.5.0
- version/redhat wu ftpd/2.6.2-5
- version/washington university wu-ftpd/2.6.2
- version/washington university wu-ftpd/2.6.0
- version/redhat wu ftpd/2.6.2-8
- version/washington university wu-ftpd/2.6.1
- version/freebsd freebsd/4.3-releng
- version/netbsd netbsd/1.5.3
- version/freebsd freebsd/4.1.1-stable
- version/netbsd netbsd/1.6
- version/openbsd openbsd/2.8
- version/freebsd freebsd/4.1.1-release
- version/freebsd freebsd/4.4-stable
- version/freebsd freebsd/4.6-stable
- version/freebsd freebsd/4.7
- version/openbsd openbsd/2.2
- version/openbsd openbsd/3.1
- version/freebsd freebsd/4.2-stable
- version/freebsd freebsd/4.5
- version/freebsd freebsd/4.7-stable
- version/freebsd freebsd/4.3-stable
- version/freebsd freebsd/4.6-release
- version/openbsd openbsd/2.1
- version/openbsd openbsd/2.9
- version/freebsd freebsd/4.3-release
- version/freebsd freebsd/4.5-release
- version/freebsd freebsd/4.5-stable
- version/openbsd openbsd/2.7
- version/freebsd freebsd/4.4
- version/freebsd freebsd/4.4-releng
- version/netbsd netbsd/1.5.1
- version/openbsd openbsd/2.3
- version/openbsd openbsd/3.2
- version/freebsd freebsd/4.2
- version/freebsd freebsd/4.7-release
- version/netbsd netbsd/1.5.2
- version/openbsd openbsd/2.4
- version/openbsd openbsd/2.5
- version/freebsd freebsd/4.1
- version/freebsd freebsd/4.1.1
- version/freebsd freebsd/4.6
- version/freebsd freebsd/4.6.2
- version/freebsd freebsd/5.0-alpha
- version/openbsd openbsd/3.0
- version/freebsd freebsd/4.0-alpha
- version/freebsd freebsd/4.3
- version/freebsd freebsd/4.8
- version/freebsd freebsd/4.8-pre-release
- version/openbsd openbsd/2.6