CVE-2002-0280

CVE-2002-0280 describes a buffer overflow vulnerability in CodeBlue versions 4 and earlier, as well as potentially other versions. This flaw allows remote attackers to execute arbitrary code by sending an overly long string within an SMTP reply. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-21643) exists for CodeBlue 5.1, indicating public exploit code availability, though community discussion and media coverage are minimal.