CVE-2004-0798

CVE-2004-0798 describes a critical buffer overflow vulnerability in Ipswitch WhatsUp Gold versions prior to 8.03 Hotfix 1, specifically within the _maincfgret.cgi script. This flaw allows unauthenticated remote attackers to execute arbitrary code on affected systems by supplying an overly long 'instancename' parameter. With a CVSS score of 7.5 (High) and a FAUCET Risk Score of 99/100, the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of the system. Exploit code, including a Metasploit module and ExploitDB entries, is publicly available, though there is no evidence of active exploitation in the wild or significant community discussion.