CVE-2003-0201 Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary c...
HighCVSS 10.0
EPSS 84.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 2.0.0 | No fix listed |
| samba | = 2.0.1 | No fix listed |
| samba | = 2.0.2 | No fix listed |
| samba | = 2.0.3 | No fix listed |
| samba | = 2.0.4 | No fix listed |
| samba | = 2.0.5 | No fix listed |
| samba | = 2.0.6 | No fix listed |
| samba | = 2.0.7 | No fix listed |
| samba | = 2.0.8 | No fix listed |
| samba | = 2.0.9 | No fix listed |
| samba | = 2.0.10 | No fix listed |
| samba | = 2.2.0 | No fix listed |
| samba | = 2.2.0a | No fix listed |
| samba | = 2.2.1a | No fix listed |
| samba | = 2.2.3a | No fix listed |
| samba | = 2.2.4 | No fix listed |
| samba | = 2.2.5 | No fix listed |
| samba | = 2.2.6 | No fix listed |
| samba | = 2.2.7 | No fix listed |
| samba | = 2.2.7a | No fix listed |
| samba | = 2.2.8 | No fix listed |
| samba-tng | = 0.3 | No fix listed |
| samba-tng | = 0.3.1 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.1 | No fix listed |
Show 57 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.2.2 | No fix listed |
| apple mac os x | = 10.2.3 | No fix listed |
| apple mac os x | = 10.2.4 | No fix listed |
| compaq tru64 | = 4.0b | No fix listed |
| compaq tru64 | = 4.0d | No fix listed |
| compaq tru64 | = 4.0d_pk9_bl17 | No fix listed |
| compaq tru64 | = 4.0f | No fix listed |
| compaq tru64 | = 4.0f_pk6_bl17 | No fix listed |
| compaq tru64 | = 4.0f_pk7_bl18 | No fix listed |
| compaq tru64 | = 4.0g | No fix listed |
| compaq tru64 | = 4.0g_pk3_bl17 | No fix listed |
| compaq tru64 | = 5.0 | No fix listed |
| compaq tru64 | = 5.0_pk4_bl17 | No fix listed |
| compaq tru64 | = 5.0_pk4_bl18 | No fix listed |
| compaq tru64 | = 5.0a | No fix listed |
| compaq tru64 | = 5.0a_pk3_bl17 | No fix listed |
| compaq tru64 | = 5.0f | No fix listed |
| compaq tru64 | = 5.1 | No fix listed |
| compaq tru64 | = 5.1_pk3_bl17 | No fix listed |
| compaq tru64 | = 5.1_pk4_bl18 | No fix listed |
| compaq tru64 | = 5.1_pk5_bl19 | No fix listed |
| compaq tru64 | = 5.1_pk6_bl20 | No fix listed |
| compaq tru64 | = 5.1a | No fix listed |
| compaq tru64 | = 5.1a_pk1_bl1 | No fix listed |
| compaq tru64 | = 5.1a_pk2_bl2 | No fix listed |
| compaq tru64 | = 5.1a_pk3_bl3 | No fix listed |
| compaq tru64 | = 5.1b | No fix listed |
| compaq tru64 | = 5.1b_pk1_bl1 | No fix listed |
| HP Inc hp-ux | = 10.01 | No fix listed |
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 10.24 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.04 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.20 | No fix listed |
| HP Inc hp-ux | = 11.22 | No fix listed |
| sun solaris | = 2.5.1 | No fix listed |
| sun solaris | = 2.6 | No fix listed |
| sun solaris | = 7.0 | No fix listed |
| sun solaris | = 8.0 | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sun solaris | = 9.0-x86_update_2 | No fix listed |
| sunos | All versions | No fix listed |
| sunos | = 5.5.1 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
| HP Inc cifs-9000 server | = a.01.05 | No fix listed |
| HP Inc cifs-9000 server | = a.01.06 | No fix listed |
| HP Inc cifs-9000 server | = a.01.07 | No fix listed |
| HP Inc cifs-9000 server | = a.01.08 | No fix listed |
| HP Inc cifs-9000 server | = a.01.08.01 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09.01 | No fix listed |
| HP Inc cifs-9000 server | = a.01.09.02 | No fix listed |
| debian/samba(Debian:12) | < 3.0 | 3.0 |
| debian/samba(Debian:13) | < 3.0 | 3.0 |
| debian/samba(Debian:14) | < 3.0 | 3.0 |
References
- Debian Security Tracker CVE-2003-0201 vendor-advisory
- CLA-2003:624 vendor-advisory
- 20030407 [DDI-1013] Buffer Overflow in Samba allows remote root compromise mailing-list
- 20030407 Immunix Secured OS 7+ samba update mailing-list
- 20030408 [Sorcerer-spells] SAMBA--SORCERER2003-04-08 mailing-list
- 20030409 GLSA: samba (200304-02) mailing-list
- DSA-280 patch vendor-advisory
- www.digitaldefense.net
- VU#267873 third-party-advisory us-government-resource
- MDKSA-2003:044 vendor-advisory
- SuSE-SA:2003:025 vendor-advisory
- RHSA-2003:137 vendor-advisory
- 7294 exploit patch vdb-entry vendor-advisory
- oval:org.mitre.oval:def:2163 signature vdb-entry
- oval:org.mitre.oval:def:567 signature vdb-entry