CVE-2002-0895

CVE-2002-0895 describes a critical buffer overflow vulnerability in MatuFtpServer version 1.1.3.0, affecting the Matu FTP product. This flaw allows remote, unauthenticated attackers to trigger a denial of service and potentially execute arbitrary code by supplying an overly long password in the PASS command. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector and low attack complexity, enabling partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB, and the vulnerability has garnered significant community discussion, indicating awareness and potential for exploitation.