What’s Vulnerable › Vulnerabilities

CVE-2003-0041

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2003-02-19 · updated 2026-06-16
• Weakness: CWE-78

Description

Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.

Affected products

• Mandrakesoft Mandrake Linux: 8.1, 8.2, 9.0
• Mandrakesoft Mandrake Multi Network Firewall: 8.2
• MIT Kerberos Ftp Client: all versions
• RedHat Linux: 6.2, 7.0, 7.1, 7.2, 7.3, 8.0

References

• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html
• http://secunia.com/advisories/7979
• http://secunia.com/advisories/8114
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:021
• http://www.redhat.com/support/errata/RHSA-2003-020.html
• http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0047.html
• http://secunia.com/advisories/7979
• http://secunia.com/advisories/8114
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:021
• http://www.redhat.com/support/errata/RHSA-2003-020.html

Get alerted when CVE-2003-0041 or the next vulnerability affects your stack