2 matches found
CVE-2003-0466
Off-by-one error in the fbrealpath function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including 1 STOR, 2 RETR,...
PT-2003-1043 · Washington University · Wu-Ftpd
Name of the Vulnerable Software and Affected Versions: wu-ftpd versions 2.5.0 through 2.6.2 Description: The issue is related to an off-by-one error in the fb realpath function, which may allow attackers to execute arbitrary code. This can be triggered by commands that cause pathnames of length...