CVE-2002-0432

CVE-2002-0432 describes a critical buffer overflow vulnerability in the lprintf and cprintf functions within sysdep.c of Citadel/UX versions 5.90 and earlier. This flaw allows remote, unauthenticated attackers to trigger a denial of service by crashing the server, and potentially execute arbitrary code, for example, through a specially crafted long HELO command to the SMTP server. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest.