Critical 9.8Published Aug 27, 2003

CVE-2003-0466Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via command…

Updated under an hour ago (Nov 2, 2026, 12:10 AM ET)

Does this affect you?

It affects redhat wu_ftpd and 7 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for redhat wu_ftpd Exploited in the last 30 days

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.

CVSS: 9.8 CRITICAL (v3.1, NVD)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-193
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

redhat wu_ftpd redhat:wu_ftpd	2.6.1-16	NVD
wuftpd wu-ftpd wuftpd:wu-ftpd	from 2.5.0 through 2.6.2	NVD
apple mac_os_x apple:mac_os_x	10.2.6	NVD
apple mac_os_x_server apple:mac_os_x_server	10.2.6	NVD
freebsd freebsd freebsd:freebsd	from 4.0 through 5.0	NVD
netbsd netbsd netbsd:netbsd	from 1.5 through 1.6.1	NVD
openbsd openbsd openbsd:openbsd	from 2.0 through 3.3	NVD
sun solaris sun:solaris	9.0	NVD

References

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0065.html	broken-link, exploit, vendor-advisory
http://download.immunix.org/ImmunixOS/7+/Updates/errata/IMNX-2003-7+-019-01	broken-link
http://isec.pl/vulnerabilities/isec-0011-wu-ftpd.txt	broken-link
http://marc.info/?l=bugtraq&m=105967301604815&w=2	mailing-list
http://marc.info/?l=bugtraq&m=106001410028809&w=2	mailing-list
http://marc.info/?l=bugtraq&m=106001702232325&w=2	mailing-list
http://marc.info/?l=bugtraq&m=106002488209129&w=2	mailing-list
http://secunia.com/advisories/9423	broken-link
http://secunia.com/advisories/9446	broken-link
http://secunia.com/advisories/9447	broken-link
1–10 of 25

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.