Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.

1. 2004-07-30 Published
2. 2004-08-02 First public exploit (EDB-370)

4.92% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).

• EDB-437 Citadel/UX 6.23 - Remote USER Directive remote, 2004-09-09
• EDB-424 Citadel/UX - Remote Buffer Overflow remote, 2004-08-30
• EDB-370 Citadel/UX - Remote Denial of Service (PoC) dos, 2004-08-02
• securityfocus.com http://www.securityfocus.com/bid/10833 referenced PoC, tagged "exploit" by a source, unverified
• nosystem.com.ar http://www.nosystem.com.ar/advisories/advisory-04.txt referenced PoC, tagged "exploit" by a source, unverified
• secunia.com http://secunia.com/advisories/12197 referenced PoC, tagged "exploit" by a source, unverified
• securitytracker.com http://securitytracker.com/id?1010809 referenced PoC, tagged "exploit" by a source, unverified

• securityfocus.com /bid/10833

  vdb-entry, exploit, patch, vendor-advisory

• nosystem.com.ar /advisories/advisory-04.txt

  exploit, patch, vendor-advisory

• secunia.com /advisories/12197

  third-party-advisory, exploit, patch, vendor-advisory

• securitytracker.com /id?1010809

  vdb-entry, exploit, patch, vendor-advisory

• marc.info /?l=bugtraq&m=109121546120575&w=2

  mailing-list

• marc.info /?l=bugtraq&m=109146099404071&w=2

  mailing-list

• exchange.xforce.ibmcloud.com /vulnerabilities/16840

  vdb-entry

• CVE List CVE-2004-1705
• NVD CVE-2004-1705

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.