Local User Memory Consumption Vulnerability in ls for Fileutils and Coreutils by GNU
CVE-2003-0854

Currently unrated

Key Information:

Vendor: Gnu
Status: Fileutils; Wu-ftpd
Vendor: CVE Published:; 17 November 2003

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2003-0854?

The ls command within the Fileutils and Coreutils packages by GNU is susceptible to a vulnerability that allows local users to exploit memory consumption issues by passing an excessively large value to the -w option. This could potentially allow attackers to impact system resources through applications that utilize the ls command, including various FTP services like wu-ftpd. Proper mitigation strategies should be implemented to safeguard against this type of local exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2003-0854 - Proof of Concept