CVE-2002-2253

CVE-2002-2253 describes multiple buffer overflow vulnerabilities in Cyrus Sieve / libSieve versions 2.1.2 and earlier. These flaws allow unauthenticated remote attackers to execute arbitrary code by supplying excessively long header names, IMAP flags, or scripts that generate numerous errors. With a CVSS score of 10.0, this vulnerability is critical, indicating a network-based attack with low complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its age and high severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog. However, it has garnered significant community discussion with 10 mentions, primarily on GitHub.