Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

webfs before 1.20 can run malicious code via long paths

CVE-2003-0833 · published 22 years ago
Summary

The webfs file‑serving program version before 1.20 can be tricked into handling an overly long folder name, which overflows its memory buffer. This overflow lets an attacker run their own code on the server, potentially taking control of the system. Update webfs to version 1.20 or later, or apply the vendor's patch, to stop this risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
webfs webfs 1.17
1.18
1.19
1.20
cpe:2.3:a:webfs:webfs:1.17:*:*:*:*:*:*:*
Original advisory text
Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.
Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long pathname.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
7% chance of attack within 30 days
Timeline
Published17 Nov 2003
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2003-0833 · NVD
Track software like this
Free during beta