An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary cod

Summary

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Timeline

1. Oct 22, 2003Public exploit on Exploit-DB

   EDB-23274

2. Oct 25, 2003, 4:00 AM UTCCVE published
3. Aug 8, 2024, 2:05 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 14