CVE-2004-0297

CVE-2004-0297 describes a critical buffer overflow vulnerability in the LDAP daemon (iLDAP.exe 3.9.15.10) of Ipswitch IMail Server 8.03. This flaw allows remote, unauthenticated attackers to trigger a denial of service by crashing the service or execute arbitrary code by sending a crafted LDAP message with an excessively large tag length. The vulnerability carries a CVSS score of 10.0, indicating maximum severity with a network attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its high EPSS and FAUCET Risk Score further underscore its critical nature. Exploitation is highly feasible, with a publicly available Metasploit module and ExploitDB entries demonstrating remote buffer overflow. Although not on the KEV catalog, the presence of exploit code and significant community discussion (10 mentions, top 1%) suggest a high likelihood of exploitation.