CVE-2003-0853: GNU Fileutils

Medium severity, CVSS 5.0. EPSS: 11.1% chance of exploitation in the next 30 days.

An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd.

Affected products

• GNU Fileutils: version 4.0 only; version 4.0.36 only; version 4.1 only; version 4.1.6 only; version 4.1.7 only
• Washington University Wu-Ftpd: version 2.4.1 only; version 2.4.2_beta2 only; version 2.4.2_beta18 only; version 2.4.2_beta18_vr4 only; version 2.4.2_beta18_vr5 only; version 2.4.2_beta18_vr6 only; …

Published 2003-11-17. Last modified 2026-06-16.