CVE-2004-0330

CVE-2004-0330 describes a critical buffer overflow vulnerability in Serv-U FTP Server versions prior to 5.0.0.4. This flaw allows remote authenticated users to execute arbitrary code by supplying an overly long time zone argument to the MDTM command. With a CVSS score of 10.0, this vulnerability is highly severe, indicating a network-based attack with low complexity, requiring no authentication, and leading to complete compromise of confidentiality, integrity, and availability. While not on the CISA KEV catalog, multiple public exploits, including Metasploit modules and several ExploitDB entries, demonstrate its exploitability, though there is no evidence of active exploitation or significant community discussion.