Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2002-0432

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2002-0432
Last Modified 05 Sep 2008 04:28:00
Published 26 Jul 2002 12:00:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2002-0432

Summary

Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.

Vulnerable Systems

Application

  • Citadel Ux 5.90


References

BID - 4263

XF - citadel-helo-bo(8426)

CONFIRM - http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz

BUGTRAQ - 20020309 Citadel/UX Server Remote DoS attack Vulnerability


Last Updated: 27 May 2016 10:36:54