CVE-2002-0432 Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks s...
HighCVSS 10.0
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| citadel ux | <= 5.90 | No fix listed |
References
- 20020309 Citadel/UX Server Remote DoS attack Vulnerability mailing-list vendor-advisory
- uncensored.citadel.org
- citadel-helo-bo(8426) patch vdb-entry vendor-advisory
- 4263 patch vdb-entry vendor-advisory