CVE-2003-0143

CVE-2003-0143 describes a critical buffer overflow vulnerability in Qpopper versions 4.0.x prior to 4.0.5fc2. Specifically, the pop_msg function fails to null-terminate a message buffer, allowing authenticated users to execute arbitrary code by sending a crafted mdef command with an excessively long macro name. This vulnerability carries a CVSS score of 10.0, indicating a severe risk with network-based attacks, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an ExploitDB entry (EDB-22342) confirms the existence of public exploit code, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.