CVE-2003-0201

Samba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Desbordamiento de búfer en la función call_trans2open en trans2.c de Samba 2.2.x anteriores a 2.2.8a, 2.0.10 y versiones anteriores 2.0.x, y Samba-TNG anteriores a de 0.3.2, permite a atacantes remotos ejecutar código arbitrario.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2003-04-04 CVE Reserved
2003-04-07 First Exploit
2003-04-15 CVE Published
2024-08-08 CVE Updated
2024-08-23 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (30)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=104972664226781&w=2	Mailing List
http://marc.info/?l=bugtraq&m=104974612519064&w=2	Mailing List
http://marc.info/?l=bugtraq&m=104981682014565&w=2	Mailing List
http://marc.info/?l=bugtraq&m=104994564212488&w=2	Mailing List
http://www.digitaldefense.net/labs/advisories/DDI-1013.txt	X_refsource_misc
http://www.kb.cert.org/vuls/id/267873	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/16880	2010-06-17
https://www.exploit-db.com/exploits/55	2003-07-13
https://www.exploit-db.com/exploits/7	2003-04-07
https://www.exploit-db.com/exploits/16861	2010-07-14
https://www.exploit-db.com/exploits/10	2003-04-10
https://www.exploit-db.com/exploits/16876	2010-06-21
https://www.exploit-db.com/exploits/9924	2003-04-07
https://www.exploit-db.com/exploits/16330	2010-06-21
https://www.exploit-db.com/exploits/22469	2003-04-07
https://www.exploit-db.com/exploits/22471	2003-04-07
https://www.exploit-db.com/exploits/22470	2003-05-12
https://www.exploit-db.com/exploits/22468	2003-04-11
https://github.com/KernelPan1k/trans2open-CVE-2003-0201	2021-04-12
http://www.securityfocus.com/bid/7294	2024-08-08

URL	Date	SRC
http://www.debian.org/security/2003/dsa-280	2018-10-30

URL	Date	SRC
ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P	2018-10-30
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624	2018-10-30
http://www.mandriva.com/security/advisories?name=MDKSA-2003:044	2018-10-30
http://www.novell.com/linux/security/advisories/2003_025_samba.html	2018-10-30
http://www.redhat.com/support/errata/RHSA-2003-137.html	2018-10-30
https://access.redhat.com/security/cve/CVE-2003-0201	2003-07-15
https://bugzilla.redhat.com/show_bug.cgi?id=1617002	2003-07-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.0 Search vendor "Samba" for product "Samba" and version "2.0.0"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.1 Search vendor "Samba" for product "Samba" and version "2.0.1"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.2 Search vendor "Samba" for product "Samba" and version "2.0.2"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.3 Search vendor "Samba" for product "Samba" and version "2.0.3"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.4 Search vendor "Samba" for product "Samba" and version "2.0.4"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.5 Search vendor "Samba" for product "Samba" and version "2.0.5"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.6 Search vendor "Samba" for product "Samba" and version "2.0.6"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.7 Search vendor "Samba" for product "Samba" and version "2.0.7"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.8 Search vendor "Samba" for product "Samba" and version "2.0.8"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.9 Search vendor "Samba" for product "Samba" and version "2.0.9"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.0.10 Search vendor "Samba" for product "Samba" and version "2.0.10"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.0 Search vendor "Samba" for product "Samba" and version "2.2.0"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.0a Search vendor "Samba" for product "Samba" and version "2.2.0a"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.1a Search vendor "Samba" for product "Samba" and version "2.2.1a"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.3a Search vendor "Samba" for product "Samba" and version "2.2.3a"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.4 Search vendor "Samba" for product "Samba" and version "2.2.4"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.5 Search vendor "Samba" for product "Samba" and version "2.2.5"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.6 Search vendor "Samba" for product "Samba" and version "2.2.6"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.7 Search vendor "Samba" for product "Samba" and version "2.2.7"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.7a Search vendor "Samba" for product "Samba" and version "2.2.7a"		-		Affected
Samba Search vendor "Samba"		Samba Search vendor "Samba" for product "Samba"				2.2.8 Search vendor "Samba" for product "Samba" and version "2.2.8"		-		Affected
Samba-tng Search vendor "Samba-tng"		Samba-tng Search vendor "Samba-tng" for product "Samba-tng"				0.3 Search vendor "Samba-tng" for product "Samba-tng" and version "0.3"		-		Affected
Samba-tng Search vendor "Samba-tng"		Samba-tng Search vendor "Samba-tng" for product "Samba-tng"				0.3.1 Search vendor "Samba-tng" for product "Samba-tng" and version "0.3.1"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.2 Search vendor "Apple" for product "Mac Os X" and version "10.2"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.2.1 Search vendor "Apple" for product "Mac Os X" and version "10.2.1"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.2.2 Search vendor "Apple" for product "Mac Os X" and version "10.2.2"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.2.3 Search vendor "Apple" for product "Mac Os X" and version "10.2.3"		-		Affected
Apple Search vendor "Apple"		Mac Os X Search vendor "Apple" for product "Mac Os X"				10.2.4 Search vendor "Apple" for product "Mac Os X" and version "10.2.4"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0b Search vendor "Compaq" for product "Tru64" and version "4.0b"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0d Search vendor "Compaq" for product "Tru64" and version "4.0d"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0d_pk9_bl17 Search vendor "Compaq" for product "Tru64" and version "4.0d_pk9_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0f Search vendor "Compaq" for product "Tru64" and version "4.0f"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0f_pk6_bl17 Search vendor "Compaq" for product "Tru64" and version "4.0f_pk6_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0f_pk7_bl18 Search vendor "Compaq" for product "Tru64" and version "4.0f_pk7_bl18"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0g Search vendor "Compaq" for product "Tru64" and version "4.0g"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				4.0g_pk3_bl17 Search vendor "Compaq" for product "Tru64" and version "4.0g_pk3_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0 Search vendor "Compaq" for product "Tru64" and version "5.0"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0_pk4_bl17 Search vendor "Compaq" for product "Tru64" and version "5.0_pk4_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0_pk4_bl18 Search vendor "Compaq" for product "Tru64" and version "5.0_pk4_bl18"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0a Search vendor "Compaq" for product "Tru64" and version "5.0a"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0a_pk3_bl17 Search vendor "Compaq" for product "Tru64" and version "5.0a_pk3_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.0f Search vendor "Compaq" for product "Tru64" and version "5.0f"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1 Search vendor "Compaq" for product "Tru64" and version "5.1"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1_pk3_bl17 Search vendor "Compaq" for product "Tru64" and version "5.1_pk3_bl17"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1_pk4_bl18 Search vendor "Compaq" for product "Tru64" and version "5.1_pk4_bl18"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1_pk5_bl19 Search vendor "Compaq" for product "Tru64" and version "5.1_pk5_bl19"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1_pk6_bl20 Search vendor "Compaq" for product "Tru64" and version "5.1_pk6_bl20"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1a Search vendor "Compaq" for product "Tru64" and version "5.1a"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1a_pk1_bl1 Search vendor "Compaq" for product "Tru64" and version "5.1a_pk1_bl1"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1a_pk2_bl2 Search vendor "Compaq" for product "Tru64" and version "5.1a_pk2_bl2"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1a_pk3_bl3 Search vendor "Compaq" for product "Tru64" and version "5.1a_pk3_bl3"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1b Search vendor "Compaq" for product "Tru64" and version "5.1b"		-		Affected
Compaq Search vendor "Compaq"		Tru64 Search vendor "Compaq" for product "Tru64"				5.1b_pk1_bl1 Search vendor "Compaq" for product "Tru64" and version "5.1b_pk1_bl1"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				10.01 Search vendor "Hp" for product "Hp-ux" and version "10.01"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				10.20 Search vendor "Hp" for product "Hp-ux" and version "10.20"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				10.24 Search vendor "Hp" for product "Hp-ux" and version "10.24"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				11.00 Search vendor "Hp" for product "Hp-ux" and version "11.00"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				11.04 Search vendor "Hp" for product "Hp-ux" and version "11.04"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				11.11 Search vendor "Hp" for product "Hp-ux" and version "11.11"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				11.20 Search vendor "Hp" for product "Hp-ux" and version "11.20"		-		Affected
Hp Search vendor "Hp"		Hp-ux Search vendor "Hp" for product "Hp-ux"				11.22 Search vendor "Hp" for product "Hp-ux" and version "11.22"		-		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				2.5.1 Search vendor "Sun" for product "Solaris" and version "2.5.1"		ppc		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				2.5.1 Search vendor "Sun" for product "Solaris" and version "2.5.1"		x86		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				2.6 Search vendor "Sun" for product "Solaris" and version "2.6"		-		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				7.0 Search vendor "Sun" for product "Solaris" and version "7.0"		x86		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				8.0 Search vendor "Sun" for product "Solaris" and version "8.0"		x86		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				9.0 Search vendor "Sun" for product "Solaris" and version "9.0"		sparc		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				9.0 Search vendor "Sun" for product "Solaris" and version "9.0"		x86		Affected
Sun Search vendor "Sun"		Solaris Search vendor "Sun" for product "Solaris"				9.0 Search vendor "Sun" for product "Solaris" and version "9.0"		x86_update_2		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				-		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.5.1 Search vendor "Sun" for product "Sunos" and version "5.5.1"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.7 Search vendor "Sun" for product "Sunos" and version "5.7"		-		Affected
Sun Search vendor "Sun"		Sunos Search vendor "Sun" for product "Sunos"				5.8 Search vendor "Sun" for product "Sunos" and version "5.8"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.05 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.05"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.06 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.06"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.07 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.07"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.08 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.08"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.08.01 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.08.01"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.09 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.09"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.09.01 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.09.01"		-		Affected
Hp Search vendor "Hp"		Cifs-9000 Server Search vendor "Hp" for product "Cifs-9000 Server"				a.01.09.02 Search vendor "Hp" for product "Cifs-9000 Server" and version "a.01.09.02"		-		Affected