CVE-2002-1090: Libesmtp

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses.

Affected products

• Libesmtp Libesmtp: up to and including 0.8.11

Published 2002-10-04. Last modified 2026-06-16.