CVE-2003-0968

CVE-2003-0968 describes a critical stack-based buffer overflow vulnerability within the SMB_Logon_Server function of the rlm_smb experimental module in FreeRADIUS versions 0.9.3 and earlier. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending a crafted, long User-Password attribute. The vulnerability carries a CVSS score of 10.0, indicating maximum severity with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its high FAUCET Risk Score of 83/100 further emphasizes its critical nature. Despite its high severity, there is no evidence of active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also negligible, suggesting limited public awareness or attention to this specific CVE.