CVE-2003-0466
Critical · 9.8CVSS
9.8
EPSS
78.1%
Published
Aug 27, 2003
CISA due date
—
The record
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.0 | wu-ftpd | 0 | 2.6.2-3woody1 |
Related vulnerabilities
- CVE-2026-63387 Libevent is an event notification library. CWE-193
- CVE-2026-44687 In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stub or forward zones where the… CWE-193
- CVE-2026-50497 Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to… CWE-193
- CVE-2026-58014 A flaw was found in GLib. CWE-193
- CVE-2026-56790 CANBoat through 6.22, fixed in commit a5a22b7, contains an off-by-one global buffer… CWE-193
- CVE-2026-56787 RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the… CWE-193
- CVE-2026-52804 Gogs is an open source self-hosted Git service. CWE-193
- CVE-2026-8357 LibreOffice Calc compiles cell formulas when opening a spreadsheet. CWE-193