Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:wu_ftpd:2.6.1-16:*:*:*:*:*:*:*

part: a version: 2.6.1-16 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductWu Ftpd (2bbb968d-e6e4-5566-8687-69f01b164d5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0466 vulnerable 2026-06-08 04:47:21.595905 Details available
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
Published: 2003-08-01T04:00:00.000Z
Updated: 2024-08-08T01:58:10.161Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.