CVE-2002-1318 Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decrypti...
HighCVSS 10.0
EPSS 51.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 2.2.2 | No fix listed |
| samba | = 2.2.3 | No fix listed |
| samba | = 2.2.4 | No fix listed |
| samba | = 2.2.5 | No fix listed |
| samba | = 2.2.6 | No fix listed |
| sgi irix | = 6.5 | No fix listed |
| sgi irix | = 6.5.1 | No fix listed |
| sgi irix | = 6.5.2 | No fix listed |
| sgi irix | = 6.5.3 | No fix listed |
| sgi irix | = 6.5.4 | No fix listed |
| sgi irix | = 6.5.5 | No fix listed |
| sgi irix | = 6.5.6 | No fix listed |
| sgi irix | = 6.5.7 | No fix listed |
| sgi irix | = 6.5.8 | No fix listed |
| sgi irix | = 6.5.9 | No fix listed |
| sgi irix | = 6.5.10 | No fix listed |
| sgi irix | = 6.5.11 | No fix listed |
| sgi irix | = 6.5.12 | No fix listed |
| sgi irix | = 6.5.13 | No fix listed |
| sgi irix | = 6.5.14 | No fix listed |
| sgi irix | = 6.5.15 | No fix listed |
| sgi irix | = 6.5.16 | No fix listed |
| sgi irix | = 6.5.17 | No fix listed |
| sgi irix | = 6.5.18 | No fix listed |
| HP Inc cifs-9000 server | = a.01.08 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc cifs-9000 server | = a.01.08.01 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09 | No fix listed |
| debian/samba(Debian:12) | < 2.2.7 | 2.2.7 |
| debian/samba(Debian:13) | < 2.2.7 | 2.2.7 |
| debian/samba(Debian:14) | < 2.2.7 | 2.2.7 |
References
- Debian Security Tracker CVE-2002-1318 vendor-advisory
- CLA-2002:550 vendor-advisory
- 20021121 GLSA: samba mailing-list
- 20021129 [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba) mailing-list
- 53580 vendor-advisory
- us1.samba.org vendor-advisory
- N-019 government-resource third-party-advisory
- HPSBUX0212-230 government-resource third-party-advisory vendor-advisory
- DSA-200 patch vendor-advisory
- VU#958321 third-party-advisory us-government-resource
- MDKSA-2002:081 vendor-advisory
- SuSE-SA:2002:045 vendor-advisory
- RHSA-2002:266 patch vendor-advisory
- 6210 patch vdb-entry vendor-advisory
- samba-password-change-bo(10683) vdb-entry
- oval:org.mitre.oval:def:1467 signature vdb-entry