CLA-2003:768Vendor advisory
http://distro.conectiva.com.br/atualizacoes?id=a&anuncio=000768 CVE-2003-0853
Coreutils 4.5.x - LS Width Argument Integer Overflow
Record summary
CVE-2003-0853 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCoreutils 4.5.x - LS Width Argument Integer OverflowExploitDB exploitby druidNot analyzed1 file
References
Showing 12 of 14CLA-2003:771Vendor advisory
http://distro.conectiva.com.br/atualizacoes?id=a&anuncio=000771 20031022 Fun with /bin/ls, yet still ls better than windowsmailing list
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html 10126Third-party advisory
http://secunia.com/advisories/10126 17069Third-party advisory
http://secunia.com/advisories/17069 support.avaya.comConfirmation
http://support.avaya.com/elmodocs2/security/ASA-2005-213.pdf guninski.com
http://www.guninski.com/binls.html MDKSA-2003:106Vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:106 RHSA-2003:309Vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-309.html RHSA-2003:310Vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-310.html IMNX-2003-7+-026-01Vendor advisory
http://www.securityfocus.com/advisories/6014 8875vdb entry
http://www.securityfocus.com/bid/8875