CVE-2002-0423

CVE-2002-0423 describes a critical buffer overflow vulnerability in efingerd versions 1.5 and potentially up to 1.61. This flaw allows remote attackers to trigger a denial of service or execute arbitrary code by sending a finger request from an IP address with an excessively long hostname, which is then processed during a reverse DNS lookup. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication and having complete impact on confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.