CVE-2003-1158

CVE-2003-1158 describes multiple buffer overflow vulnerabilities within the FTP service of Plug and Play Web Server version 1.0002c. Remote attackers can exploit these flaws by sending excessively long FTP commands such as dir, ls, delete, mkdir, DELE, RMD, or MKD, leading to a denial of service (crash) of the server. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, but its impact is limited to availability (denial of service). While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry (EDB-23166) confirms the existence of exploit code. Despite this, the CVE has garnered minimal community discussion and media coverage, suggesting low public awareness and a lack of widespread exploitation.