Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2004-0148

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

  • Published: Apr 15, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0148
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
washington_university / wu-ftpd 2.4.2_beta18 2.4.2_beta18.x
washington_university / wu-ftpd 2.4.2_beta18_vr14 2.4.2_beta18_vr14.x
washington_university / wu-ftpd 2.5.0 2.5.0.x
washington_university / wu-ftpd 2.4.2_vr17 2.4.2_vr17.x
washington_university / wu-ftpd 2.4.2_beta18_vr9 2.4.2_beta18_vr9.x
washington_university / wu-ftpd 2.4.1 2.4.1.x
washington_university / wu-ftpd 2.4.2_vr16 2.4.2_vr16.x
washington_university / wu-ftpd 2.6.2 2.6.2.x
washington_university / wu-ftpd 2.6.0 2.6.0.x
washington_university / wu-ftpd 2.4.2_beta18_vr11 2.4.2_beta18_vr11.x
washington_university / wu-ftpd 2.4.2_beta18_vr6 2.4.2_beta18_vr6.x
washington_university / wu-ftpd 2.4.2_beta18_vr4 2.4.2_beta18_vr4.x
washington_university / wu-ftpd 2.4.2_beta18_vr12 2.4.2_beta18_vr12.x
sgi / propack 2.3 2.3.x
washington_university / wu-ftpd 2.4.2_beta18_vr5 2.4.2_beta18_vr5.x
washington_university / wu-ftpd 2.4.2_beta18_vr13 2.4.2_beta18_vr13.x
washington_university / wu-ftpd 2.4.2_beta18_vr10 2.4.2_beta18_vr10.x
washington_university / wu-ftpd 2.4.2_beta18_vr15 2.4.2_beta18_vr15.x
washington_university / wu-ftpd 2.6.1 2.6.1.x
washington_university / wu-ftpd 2.4.2_beta2 2.4.2_beta2.x
washington_university / wu-ftpd 2.4.2_beta18_vr7 2.4.2_beta18_vr7.x
sgi / propack 2.4 2.4.x
washington_university / wu-ftpd 2.4.2_beta18_vr8 2.4.2_beta18_vr8.x