CVE-2003-0085 Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
HighCVSS 10.0
EPSS 86.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 2.0.0 | No fix listed |
| samba | = 2.0.1 | No fix listed |
| samba | = 2.0.2 | No fix listed |
| samba | = 2.0.3 | No fix listed |
| samba | = 2.0.4 | No fix listed |
| samba | = 2.0.5 | No fix listed |
| samba | = 2.0.6 | No fix listed |
| samba | = 2.0.7 | No fix listed |
| samba | = 2.0.8 | No fix listed |
| samba | = 2.0.9 | No fix listed |
| samba | = 2.0.10 | No fix listed |
| samba | = 2.2.0 | No fix listed |
| samba | = 2.2.0a | No fix listed |
| samba | = 2.2.1a | No fix listed |
| samba | = 2.2.2 | No fix listed |
| samba | = 2.2.3 | No fix listed |
| samba | = 2.2.3a | No fix listed |
| samba | = 2.2.4 | No fix listed |
| samba | = 2.2.5 | No fix listed |
| samba | = 2.2.6 | No fix listed |
| samba | = 2.2.7 | No fix listed |
| samba | = 2.2.7a | No fix listed |
| HP Inc cifs-9000 server | = a.01.05 | No fix listed |
| HP Inc cifs-9000 server | = a.01.06 | No fix listed |
| HP Inc cifs-9000 server | = a.01.07 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc cifs-9000 server | = a.01.08 | No fix listed |
| HP Inc cifs-9000 server | = a.01.08.01 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09.01 | No fix listed |
| debian/samba(Debian:12) | < 2.2.8 | 2.2.8 |
| debian/samba(Debian:13) | < 2.2.8 | 2.2.8 |
| debian/samba(Debian:14) | < 2.2.8 | 2.2.8 |
References
- Debian Security Tracker CVE-2003-0085 vendor-advisory
- 20030317 GLSA: samba (200303-11) mailing-list
- 20030317 Security Bugfix for Samba - Samba 2.2.8 Released mailing-list
- 20030318 [OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba) mailing-list
- 8299 third-party-advisory
- 8303 third-party-advisory
- DSA-262 patch vendor-advisory
- GLSA-200303-11 vendor-advisory
- VU#298233 third-party-advisory us-government-resource
- MDKSA-2003:032 vendor-advisory
- SuSE-SA:2003:016 vendor-advisory
- RHSA-2003:095 vendor-advisory
- RHSA-2003:096 vendor-advisory
- 20030325 Fwd: APPLE-SA-2003-03-24 Samba, OpenSSL mailing-list vendor-advisory
- IMNX-2003-7+-003-01 mailing-list vendor-advisory
- 7106 patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:552 signature vdb-entry