CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

• http://marc.info/?l=bugtraq&m=108999466902690&w=2
• http://secunia.com/advisories/11055
• http://secunia.com/advisories/20168
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1
• http://www.debian.org/security/2004/dsa-457Patch, Vendor Advisory
• http://www.frsirt.com/english/advisories/2006/1867
• http://www.redhat.com/support/errata/RHSA-2004-096.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/9832Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15423
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648
• http://marc.info/?l=bugtraq&m=108999466902690&w=2
• http://secunia.com/advisories/11055
• http://secunia.com/advisories/20168
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1
• http://www.debian.org/security/2004/dsa-457Patch, Vendor Advisory
• http://www.frsirt.com/english/advisories/2006/1867
• http://www.redhat.com/support/errata/RHSA-2004-096.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/9832Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15423
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648

Published

Apr 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0142Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0143Multiple vulnerabilities in Nokia 6310(i) Mobile phones allo…
• CVE-2004-0144Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0145Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0146Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0147Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2004-0149Multiple buffer overflows in xboing before 2.4 allow local u…
• CVE-2004-0150Buffer overflow in the getaddrinfo function in Python 2.2 be…
• CVE-2004-0151Unknown vulnerability in xitalk 1.1.11 and earlier allows lo…
• CVE-2004-0152Multiple stack-based buffer overflows in (1) the encode_mime…
• CVE-2004-0153Multiple format string vulnerabilities in emil 2.1.0 and ear…
• CVE-2004-0154rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows …