CVE-2003-0201
high · 10Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
10
CVSS
84.5%
EPSS (exploit prob.)
100th
EPSS percentile
2003-05-05
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| samba | samba | 2.0.0 |
| samba | samba | 2.0.1 |
| samba | samba | 2.0.2 |
| samba | samba | 2.0.3 |
| samba | samba | 2.0.4 |
| samba | samba | 2.0.5 |
| samba | samba | 2.0.6 |
| samba | samba | 2.0.7 |
| samba | samba | 2.0.8 |
| samba | samba | 2.0.9 |
| samba | samba | 2.0.10 |
| samba | samba | 2.2.0 |
| samba | samba | 2.2.0a |
| samba | samba | 2.2.1a |
| samba | samba | 2.2.3a |
| samba | samba | 2.2.4 |
| samba | samba | 2.2.5 |
| samba | samba | 2.2.6 |
| samba | samba | 2.2.7 |
| samba | samba | 2.2.7a |
| samba | samba | 2.2.8 |
| samba-tng | samba-tng | 0.3 |
| samba-tng | samba-tng | 0.3.1 |
| apple | mac_os_x | 10.2 |
| apple | mac_os_x | 10.2.1 |
| apple | mac_os_x | 10.2.2 |
| apple | mac_os_x | 10.2.3 |
| apple | mac_os_x | 10.2.4 |
| compaq | tru64 | 4.0b |
| compaq | tru64 | 4.0d |
| compaq | tru64 | 4.0d_pk9_bl17 |
| compaq | tru64 | 4.0f |
| compaq | tru64 | 4.0f_pk6_bl17 |
| compaq | tru64 | 4.0f_pk7_bl18 |
| compaq | tru64 | 4.0g |
| compaq | tru64 | 4.0g_pk3_bl17 |
| compaq | tru64 | 5.0 |
| compaq | tru64 | 5.0_pk4_bl17 |
| compaq | tru64 | 5.0_pk4_bl18 |
| compaq | tru64 | 5.0a |
Check a specific version with /api/v1/cve/match.
References
- ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624
- http://marc.info/?l=bugtraq&m=104972664226781&w=2
- http://marc.info/?l=bugtraq&m=104974612519064&w=2
- http://marc.info/?l=bugtraq&m=104981682014565&w=2
- http://marc.info/?l=bugtraq&m=104994564212488&w=2
- http://www.debian.org/security/2003/dsa-280
- http://www.digitaldefense.net/labs/advisories/DDI-1013.txt
- http://www.kb.cert.org/vuls/id/267873
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:044
- http://www.novell.com/linux/security/advisories/2003_025_samba.html
- http://www.redhat.com/support/errata/RHSA-2003-137.html
- http://www.securityfocus.com/bid/7294
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567
- ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624
- http://marc.info/?l=bugtraq&m=104972664226781&w=2
- http://marc.info/?l=bugtraq&m=104974612519064&w=2
- http://marc.info/?l=bugtraq&m=104981682014565&w=2
- http://marc.info/?l=bugtraq&m=104994564212488&w=2
- http://www.debian.org/security/2003/dsa-280
- http://www.digitaldefense.net/labs/advisories/DDI-1013.txt
- http://www.kb.cert.org/vuls/id/267873
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:044
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2003-0201