CVE-2002-0432

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://online.securityfocus.com/archive/1/260934Vendor Advisory
http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz
http://www.iss.net/security_center/static/8426.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4263Patch, Vendor Advisory
http://online.securityfocus.com/archive/1/260934Vendor Advisory
http://uncensored.citadel.org/pub/citadel/citadel-ux-5.91.tar.gz
http://www.iss.net/security_center/static/8426.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4263Patch, Vendor Advisory

Timeline

Published: Jul 26, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-04335.0Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.CVE-2002-043410.0Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.CVE-2002-04351.2Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local CVE-2002-043610.0sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in CVE-2002-043710.0Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes)CVE-2002-04385.0ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an inc CVE-2002-04397.5Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary J CVE-2002-04407.5Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web serve CVE-2002-04415.0Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd CVE-2002-04427.2Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.CVE-2002-04434.6Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before CVE-2002-04447.5Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incom