CVE-2004-0238

CVE-2004-0238 describes multiple buffer overflow vulnerabilities in Overkill (0verkill) 0.15pre3. These flaws could allow local users to execute arbitrary code in the client via a long HOME environment variable, and potentially remote attackers to execute arbitrary code through long strings in the send_message function or the server's parse_command_line function. With a CVSS score of 7.2, this vulnerability is considered high severity, indicating a local attack vector with low complexity and complete compromise of confidentiality, integrity, and availability. Its EPSS score is low, suggesting a minimal likelihood of exploitation in the wild. There is no evidence of active exploitation, nor is it listed in CISA's KEV catalog. While an ExploitDB entry exists for a similar version (0.16), there are no Metasploit or Nuclei modules, and community discussion and media coverage are virtually nonexistent.