CVE-2003-1327: Buffer Overflow
Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAILADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Rebuild or deploy wu-ftpd without the MAIL_ADMIN compile-time option (i.e., disable the MAIL_ADMIN option) so the server does not construct administrative notification messages that can trigger the buffer overflow.
wu-ftpd MAIL_ADMIN = disabled - Compensating control
Disable anonymous FTP uploads or revoke write permissions for anonymous users to prevent remote anonymous users from uploading files with long pathnames that trigger the overflow.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1327?
CVE-2003-1327 is considered to be a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2003-1327?
To fix CVE-2003-1327, upgrade to wu-ftpd version 2.6.2 or later, ensuring the MAIL_ADMIN option is not enabled.
Who is affected by CVE-2003-1327?
CVE-2003-1327 affects users of wu-ftpd versions 2.6.2 and earlier that have the MAIL_ADMIN option enabled.
Can CVE-2003-1327 be exploited remotely?
Yes, CVE-2003-1327 can be exploited remotely by anonymous users uploading files with long pathnames.
What systems are vulnerable to CVE-2003-1327?
Systems running wu-ftpd version 2.6.2 or earlier, compiled with MAIL_ADMIN enabled, are vulnerable to CVE-2003-1327.