CVE-2003-0466

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.

• CWE-193

• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-011.txt.ascBroken Link
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.htmlBroken Link, Exploit, Vendor Advisory
• http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01Broken Link
• http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txtBroken Link
• http://marc.info/?l=bugtraq&m=105967301604815&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106001410028809&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106001702232325&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106002488209129&w=2Mailing List
• http://secunia.com/advisories/9423Broken Link
• http://secunia.com/advisories/9446Broken Link
• http://secunia.com/advisories/9447Broken Link
• http://secunia.com/advisories/9535Broken Link
• http://securitytracker.com/id?1007380Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001257.1-1Broken Link
• http://www.debian.org/security/2003/dsa-357Broken Link
• http://www.kb.cert.org/vuls/id/743092Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:080Third Party Advisory
• http://www.novell.com/linux/security/advisories/2003_032_wuftpd.htmlBroken Link
• http://www.osvdb.org/6602Broken Link
• http://www.redhat.com/support/errata/RHSA-2003-245.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-246.htmlBroken Link
• http://www.securityfocus.com/archive/1/424852/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/425061/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/8315Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.turbolinux.com/security/TLSA-2003-46.txtBroken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12785Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1970Broken Link
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-011.txt.ascBroken Link
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.htmlBroken Link, Exploit, Vendor Advisory
• http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01Broken Link
• http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txtBroken Link
• http://marc.info/?l=bugtraq&m=105967301604815&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106001410028809&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106001702232325&w=2Mailing List
• http://marc.info/?l=bugtraq&m=106002488209129&w=2Mailing List
• http://secunia.com/advisories/9423Broken Link
• http://secunia.com/advisories/9446Broken Link
• http://secunia.com/advisories/9447Broken Link
• http://secunia.com/advisories/9535Broken Link
• http://securitytracker.com/id?1007380Broken Link, Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001257.1-1Broken Link
• http://www.debian.org/security/2003/dsa-357Broken Link
• http://www.kb.cert.org/vuls/id/743092Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:080Third Party Advisory
• http://www.novell.com/linux/security/advisories/2003_032_wuftpd.htmlBroken Link
• http://www.osvdb.org/6602Broken Link
• http://www.redhat.com/support/errata/RHSA-2003-245.htmlBroken Link
• http://www.redhat.com/support/errata/RHSA-2003-246.htmlBroken Link
• http://www.securityfocus.com/archive/1/424852/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/425061/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/8315Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• http://www.turbolinux.com/security/TLSA-2003-46.txtBroken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12785Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1970Broken Link

Published

Aug 27, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0460The rotatelogs program on Apache before 1.3.28, for Windows …
• CVE-2003-0461/proc/tty/driver/serial in Linux 2.4.x reveals the exact num…
• CVE-2003-0462A race condition in the way env_start and env_end pointers a…
• CVE-2003-0463Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0464The RPC code in Linux kernel 2.4 sets the reuse flag when so…
• CVE-2003-0465The kernel strncpy function in Linux 2.4 and 2.5 does not %N…
• CVE-2003-0467Unknown vulnerability in ip_nat_sack_adjust of Netfilter in …
• CVE-2003-0468Postfix 1.1.11 and earlier allows remote attackers to use Po…
• CVE-2003-0469Buffer overflow in the HTML Converter (HTML32.cnv) on variou…
• CVE-2003-0470Buffer overflow in the "RuFSI Utility Class" ActiveX control…
• CVE-2003-0471Buffer overflow in WebAdmin.exe for WebAdmin allows remote a…
• CVE-2003-0472The IPv6 capability in IRIX 6.5.19 allows remote attackers t…