CVE-2008-0394: Citadel Smtp

High severity, CVSS 7.5. EPSS: 11.9% chance of exploitation in the next 30 days.

Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information.

Affected products

• Citadel Smtp: up to and including 7.10

Published 2008-01-23. Last modified 2026-06-16.