Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:fileutils:4.1.6:*:*:*:*:*:*:*

part: a version: 4.1.6 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductFileutils (5fd32c18-e618-51a3-86e6-8a0c22e44531)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/goj/coreutils purl2cpe 2026-06-01 10:11:53.805675
pkg:github/homer6/gnu_coreutils purl2cpe 2026-06-01 10:11:53.805676
pkg:github/nqct/coreutils purl2cpe 2026-06-01 10:11:53.805677
pkg:gnu/fileutils purl2cpe 2026-06-01 10:11:53.805679

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0854 vulnerable 2026-06-08 04:47:22.733428 Details available
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0853 vulnerable 2026-06-08 04:47:22.718399 Details available
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.707Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0435 vulnerable 2026-06-08 04:46:21.446724 Details available
Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T02:49:28.518Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.