CVE-2004-0148

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Apr 15, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01494.6Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.CVE-2004-01507.5Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute ar CVE-2004-01517.2Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.CVE-2004-01527.5Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function CVE-2004-01537.5Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain CVE-2004-01545.0rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory f CVE-2004-01557.5The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature CVE-2004-01565.0Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial o CVE-2004-01574.6x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute CVE-2004-01584.6Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2)CVE-2004-01597.5Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code CVE-2004-01607.2Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.