Lucene search
+L

CVE-2003-0466

🗓️ 01 Aug 2003 04:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 184 Views🌐 WEB

Off-by-one error in fb_realpath() function allows arbitrary code execution in wu-ftpd 2.5.0 through 2.6.2

Related
Detection
Refs
Paths
NVD
Node
OR
redhatwu_ftpdMatch2.6.1-16
wuftpdwu-ftpdRange2.5.02.6.2
Node
OR
applemac_os_xMatch10.2.6
freebsdfreebsdRange4.05.0
netbsdnetbsdRange1.51.6.1
openbsdopenbsdRange2.03.3
sunsolarisMatch9.0sparc
ParameterPositionPathDescriptionCWE
STORrequest bodySTOROff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via STOR command.CWE-193
RETRrequest bodyRETROff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via RETR command.CWE-193
APPErequest bodyAPPEOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via APPE command.CWE-193
DELErequest bodyDELEOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via DELE command.CWE-193
MKDrequest bodyMKDOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via MKD command.CWE-193
RMDrequest bodyRMDOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via RMD command.CWE-193
STOUrequest bodySTOUOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via STOU command.CWE-193
RNTOrequest bodyRNTOOff-by-one path handling in wu-ftpd realpath-based operations can overflow buffers when pathnames exceed limit, exploited via RNTO command.CWE-193

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2026 22:02Current
9.8High risk
Vulners AI Score9.8
CVSS 3.19.8
CVSS 210
EPSS0.78115
184