VDB

GCVE-110-CERTCC-2003-743092

GCVE-110-CERTCC-2003-743092
Advisory Published
Vulnetix · Advisory published July 31, 2003
A function originally derived from 4.4BSD, realpath(3), contains a vulnerability that may permit a malicious user to gain root access to the server. This function was derived from the FreeBSD 3.x tree. Other applications and operating systems that use or were derived from this code base may be affected. This problem was originally reported to affect WU-FTPd. It has been discoved to affect various BSD implementations as well.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact20population10exploitation0widely_known15score_current6.75ease_of_exploitation10

Aliases

CVE-2003-0466

Transitive aliases

VAR-200308-0014DSA-357EUVD-2003-0460RHSA-2003:245GHSA-7c4w-gm97-vgqqBDU:2015-04795RHSA-2003:246GSD-2003-0466

References

realpath(3) function contains off-by-one buffer overflow
advisory
realpath(3) function contains off-by-one buffer overflow
url
realpath(3) function contains off-by-one buffer overflow
url
realpath(3) function contains off-by-one buffer overflow
url

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›