CVE-2004-1705

CVE-2004-1705 affects Citadel/UX 6.23 and earlier, where a buffer overflow in the remote USER command can be triggered by a crafted username. This vulnerability can cause a denial of service and, per Nessus/related sources, could allow arbitrary code execution on affected servers. The issue origi...

CVE-2002-0432

Citadel/UX 5.90 and earlier are affected by a buffer overflow in sysdep.c (functions lprintf and cprintf). The flaw can be triggered by long HELO commands sent to the SMTP server, leading to denial of service and possibly arbitrary code execution on a remote attacker. Affected product/version: Ci...

CVE-2004-1192

CVE-2004-1192 is a format-string vulnerability in Citadel/UX’s lprintf() on version 6.27 and earlier that allows remote attackers to execute arbitrary code by sending format specifiers to the server. Reported impact is complete confidentiality, integrity, and availability compromise with high sev...