CVE-2003-0558

CVE-2003-0558 describes a buffer overflow vulnerability in LeapFTP version 2.7.3.600. This flaw allows a malicious FTP server to execute arbitrary code on a client's system by sending an excessively long IP address in response to a PASV request. With a CVSS score of 7.5, this vulnerability is considered highly severe, as it can be exploited remotely with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, public exploit modules exist in Metasploit and ExploitDB, indicating readily available exploit code. Despite this, there is minimal community discussion or media coverage surrounding this older vulnerability.