Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:fileutils:4.1.7:*:*:*:*:*:*:*

part: a version: 4.1.7 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductFileutils (5fd32c18-e618-51a3-86e6-8a0c22e44531)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/goj/coreutils purl2cpe 2026-06-01 10:11:53.805680
pkg:github/homer6/gnu_coreutils purl2cpe 2026-06-01 10:11:53.805682
pkg:github/nqct/coreutils purl2cpe 2026-06-01 10:11:53.805683
pkg:gnu/fileutils purl2cpe 2026-06-01 10:11:53.805684

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0854 vulnerable 2026-06-08 04:47:22.733446 Details available
ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0853 vulnerable 2026-06-08 04:47:22.718927 Details available
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.707Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.