CVE-2003-0853
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a...
CVE-2003-0853 is a medium vulnerability (CVSS 5.0) in Gnu Fileutils, published October 25, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.1%, the 95th percentile. Fixed in coreutils 5.2.1-1.
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Exploit likelihood
What each source reports
NVD Score used
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- Updated
- 2026-11-02
EUVDEUVD-2003-0844 No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
EUVD-2003-0844- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rh2-8gqg-243p No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a...
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
GHSA-5rh2-8gqg-243p- Updated
- 2026-11-02
OSV No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0853 No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
DEBIAN-CVE-2003-0853- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Coreutils 4.5.x - LS Width Argument Integer Overflow | 2003-10-22 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000771
support.avaya.com/elmodocs2/security/ASA-2005-213.pdf
lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html
redhat.com/support/errata/RHSA-2003-309.html
turbolinux.com/security/TLSA-2003-60.txt
Show 10 moreShow less
securityfocus.com/bid/8875
secunia.com/advisories/17069
guninski.com/binls.html
mandriva.com/security/advisories?name=MDKSA-2003:106
nvd.nist.gov/vuln/detail/CVE-2003-0853
github.com/advisories/GHSA-5rh2-8gqg-243p
security-tracker.debian.org/tracker/CVE-2003-0853