vulnwire
10.0crit

CVE-2003-0085in critical feed3 exploits

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, a…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
86.4%
percentile 100%
Public exploits
3
Exploit-DB

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.

Exploit prediction (EPSS)

86.42% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • EDB-9936 Samba 2.2.x - 'nttrans' Remote Overflow (Metasploit) · remote · 2003-04-07
  • EDB-22356 Samba 2.2.x - CIFS/9000 Server A.01.x Packet Assembling Buffer Overflow · remote · 2003-03-15
  • EDB-16321 Samba 2.2.2 < 2.2.6 - 'nttrans' Remote Buffer Overflow (Metasploit) (1) · remote · 2010-04-28

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • marc.info /?l=bugtraq&m=104792723017768&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=104792646416629&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • gentoo.org /security/en/glsa/glsa-200303-11.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • securityfocus.com /archive/1/316165/30/25370/threaded · mailing-list, x_refsource_BUGTRAQ, vendor-advisory, x_refsource_APPLE, x_transferred
  • redhat.com /support/errata/RHSA-2003-096.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A552 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • marc.info /?l=bugtraq&m=104801012929374&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/7106 · vdb-entry, x_refsource_BID, x_transferred
  • redhat.com /support/errata/RHSA-2003-095.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • kb.cert.org /vuls/id/298233 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • novell.com /linux/security/advisories/2003_016_samba.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2003:032 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • securityfocus.com /archive/1/317145/30/25220/threaded · vendor-advisory, x_refsource_IMMUNIX, mailing-list, x_refsource_BUGTRAQ, x_transferred
  • debian.org /security/2003/dsa-262 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • secunia.com /advisories/8303 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/8299 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.