CVE-2003-0853
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a...
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
Exploit likelihood
What each source reports
NVD Score used
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- Updated
- 2026-11-02
EUVDEUVD-2003-0844 No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
EUVD-2003-0844- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5rh2-8gqg-243p No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a...
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
GHSA-5rh2-8gqg-243p- Updated
- 2026-11-02
OSV No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
CVE-2003-0853- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0853 No score
An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.
- Record
DEBIAN-CVE-2003-0853- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Coreutils 4.5.x - LS Width Argument Integer Overflow | 2003-10-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0853 is a medium vulnerability (CVSS 5.0) in Gnu Fileutils, published October 25, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.1%, the 95th percentile. Fixed in coreutils 5.2.1-1.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000771
support.avaya.com/elmodocs2/security/ASA-2005-213.pdf
lists.grok.org.uk/pipermail/full-disclosure/2003-October/012548.html
redhat.com/support/errata/RHSA-2003-309.html
turbolinux.com/security/TLSA-2003-60.txt
Show 10 moreShow less
securityfocus.com/bid/8875
secunia.com/advisories/17069
guninski.com/binls.html
mandriva.com/security/advisories?name=MDKSA-2003:106
nvd.nist.gov/vuln/detail/CVE-2003-0853
github.com/advisories/GHSA-5rh2-8gqg-243p
security-tracker.debian.org/tracker/CVE-2003-0853