Citadel/UX versions 6.23 and below are vulnerable to a buffer overflow that occurs when more than 97 bytes are sent with the USER directive to port 504.
aea378e63801bac88b6f441bca646722e75b24e31337df108dde36bc21e66ee6
Remote exploit for Citadel/UX versions 6.23 and below that makes use of the USER directive overflow. Successful exploitation adds an account in /etc/passwd.
49c652bb47321274ba36227f601c86fc98a4cb2b83fcc5e9942bc5c64a9773ad