CVE-2003-0854: GNU Fileutils

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.

Affected products

• GNU Fileutils: version 4.0 only; version 4.0.36 only; version 4.1 only; version 4.1.6 only; version 4.1.7 only
• Washington University Wu-Ftpd: version 2.4.1 only; version 2.4.2_beta2 only; version 2.4.2_beta18 only; version 2.4.2_beta18_vr4 only; version 2.4.2_beta18_vr5 only; version 2.4.2_beta18_vr6 only; …

Published 2003-11-17. Last modified 2026-06-16.