CVE-2003-0380

CVE-2003-0380 describes a buffer overflow vulnerability in atftpd versions 0.6.1 and earlier, potentially affecting later versions as well. This flaw allows unauthenticated remote attackers to trigger a denial of service (crash) and potentially execute arbitrary code by supplying an excessively long filename. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for full confidentiality, integrity, and availability impact. While not listed on the KEV catalog, an ExploitDB entry confirms the existence of remote command execution exploit code, despite a lack of Metasploit or Nuclei modules and minimal community discussion or media coverage.