CVE-2004-0148: Sgi Propack

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Affected products

• Sgi Propack: version 2.3 only; version 2.4 only
• Washington University Wu-Ftpd: version 2.4.1 only; version 2.4.2_beta2 only; version 2.4.2_beta18 only; version 2.4.2_beta18_vr4 only; version 2.4.2_beta18_vr5 only; version 2.4.2_beta18_vr6 only; …

Published 2004-04-15. Last modified 2026-06-16.