CVE-2003-1327: Washington University Wu-Ftpd

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when compiled with MAIL_ADMIN option enabled on a system that supports very long pathnames, might allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname, which triggers the overflow when wu-ftpd constructs a notification message to the administrator.

Affected products

• Washington University Wu-Ftpd: up to and including 2.6.2

Published 2003-12-31. Last modified 2026-06-16.