10.0crit
CVE-2003-0201in critical feed12 exploits
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
84.6%
percentile 100%
Public exploits
12
Exploit-DB
Summary
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Exploit prediction (EPSS)
84.62% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- EDB-9924 Samba 2.2.0 < 2.2.8 (OSX) - trans2open Overflow (Metasploit) · remote · 2003-04-07
- EDB-7 Samba 2.2.x - Remote Buffer Overflow · remote · 2003-04-07
- EDB-55 Samba 2.2.8 - Brute Force Method Remote Command Execution · remote · 2003-07-13
- EDB-22471 Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (4) · remote · 2003-04-07
- EDB-22470 Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (3) · remote · 2003-05-12
- EDB-22469 Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (2) · remote · 2003-04-07
- EDB-22468 Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (1) · remote · 2003-04-11
- EDB-16880 Samba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow (Metasploit) · remote · 2010-06-17
- EDB-16876 Samba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit) · remote · 2010-06-21
- EDB-16861 Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit) · remote · 2010-07-14
- EDB-16330 Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit) · remote · 2010-06-21
- EDB-10 Samba < 2.2.8 (Linux/BSD) - Remote Code Execution · remote · 2003-04-10
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000624 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
- marc.info /?l=bugtraq&m=104981682014565&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- novell.com /linux/security/advisories/2003_025_samba.html · vendor-advisory, x_refsource_SUSE, x_transferred
- securityfocus.com /bid/7294 · vdb-entry, x_refsource_BID, x_transferred
- digitaldefense.net /labs/advisories/DDI-1013.txt · x_refsource_MISC, x_transferred
- marc.info /?l=bugtraq&m=104972664226781&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- debian.org /security/2003/dsa-280 · vendor-advisory, x_refsource_DEBIAN, x_transferred
- marc.info /?l=bugtraq&m=104994564212488&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- kb.cert.org /vuls/id/267873 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- mandriva.com /security/advisories?name=MDKSA-2003:044 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
- redhat.com /support/errata/RHSA-2003-137.html · vendor-advisory, x_refsource_REDHAT, x_transferred
- marc.info /?l=bugtraq&m=104974612519064&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567 · vdb-entry, signature, x_refsource_OVAL, x_transferred
- oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163 · vdb-entry, signature, x_refsource_OVAL, x_transferred
Sources
- CVE List: CVE-2003-0201
- NVD: CVE-2003-0201
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.