Skip to content

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory...

2.1 LowPublic exploitFix available

CVE-2003-0854 is a low vulnerability (CVSS 2.1) in Gnu Fileutils, published October 25, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 65th percentile. Fixed in coreutils 5.2.1-1.

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Exploit likelihood

1.11%Down 2.1 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: CVE-2003-0854
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: CVE-2003-0854
Updated: 2026-11-02

EUVDEUVD-2003-0845 No score

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: EUVD-2003-0845
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qjv8-gc24-r5w4 No score

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory...

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: GHSA-qjv8-gc24-r5w4
Updated: 2026-11-02

OSV No score

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: CVE-2003-0854
Updated: 2026-11-02

OSVDEBIAN-CVE-2003-0854 No score

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Record: DEBIAN-CVE-2003-0854
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`coreutils` Debian:12	before 5.2.1-1	5.2.1-1
`coreutils` Debian:13	before 5.2.1-1	5.2.1-1
`coreutils` Debian:14	before 5.2.1-1	5.2.1-1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	WU-FTPD 2.6.2 - 'wuftpd-freezer.c' Remote Denial of Service	2003-10-31

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 11 moreShow less