CVE-2002-1090

CVE-2002-1090 describes a buffer overflow vulnerability in the read_smtp_response function of libesmtp versions prior to 0.8.11. This flaw allows a malicious remote SMTP server to execute arbitrary code or cause a denial of service by sending specially crafted, long responses. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and low attack complexity for potential compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.