10

CVE-2003-0201

Exploit
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version2.0.0
Samba ≫ Samba Version2.0.1
Samba ≫ Samba Version2.0.2
Samba ≫ Samba Version2.0.3
Samba ≫ Samba Version2.0.4
Samba ≫ Samba Version2.0.5
Samba ≫ Samba Version2.0.6
Samba ≫ Samba Version2.0.7
Samba ≫ Samba Version2.0.8
Samba ≫ Samba Version2.0.9
Samba ≫ Samba Version2.0.10
Samba ≫ Samba Version2.2.0
Samba ≫ Samba Version2.2.0a
Samba ≫ Samba Version2.2.1a
Samba ≫ Samba Version2.2.3a
Samba ≫ Samba Version2.2.4
Samba ≫ Samba Version2.2.5
Samba ≫ Samba Version2.2.6
Samba ≫ Samba Version2.2.7
Samba ≫ Samba Version2.2.7a
Samba ≫ Samba Version2.2.8
Samba-tng ≫ Samba-tng Version0.3
Samba-tng ≫ Samba-tng Version0.3.1
Apple ≫ macOS X Version10.2
Apple ≫ macOS X Version10.2.1
Apple ≫ macOS X Version10.2.2
Apple ≫ macOS X Version10.2.3
Apple ≫ macOS X Version10.2.4
Compaq ≫ Tru64 Version4.0b
Compaq ≫ Tru64 Version4.0d
Compaq ≫ Tru64 Version4.0d_pk9_bl17
Compaq ≫ Tru64 Version4.0f
Compaq ≫ Tru64 Version4.0f_pk6_bl17
Compaq ≫ Tru64 Version4.0f_pk7_bl18
Compaq ≫ Tru64 Version4.0g
Compaq ≫ Tru64 Version4.0g_pk3_bl17
Compaq ≫ Tru64 Version5.0
Compaq ≫ Tru64 Version5.0_pk4_bl17
Compaq ≫ Tru64 Version5.0_pk4_bl18
Compaq ≫ Tru64 Version5.0a
Compaq ≫ Tru64 Version5.0a_pk3_bl17
Compaq ≫ Tru64 Version5.0f
Compaq ≫ Tru64 Version5.1
Compaq ≫ Tru64 Version5.1_pk3_bl17
Compaq ≫ Tru64 Version5.1_pk4_bl18
Compaq ≫ Tru64 Version5.1_pk5_bl19
Compaq ≫ Tru64 Version5.1_pk6_bl20
Compaq ≫ Tru64 Version5.1a
Compaq ≫ Tru64 Version5.1a_pk1_bl1
Compaq ≫ Tru64 Version5.1a_pk2_bl2
Compaq ≫ Tru64 Version5.1a_pk3_bl3
Compaq ≫ Tru64 Version5.1b
Compaq ≫ Tru64 Version5.1b_pk1_bl1
Hp ≫ Hp-ux Version10.01
Hp ≫ Hp-ux Version10.20
Hp ≫ Hp-ux Version10.24
Hp ≫ Hp-ux Version11.00
Hp ≫ Hp-ux Version11.04
Hp ≫ Hp-ux Version11.11
Hp ≫ Hp-ux Version11.20
Hp ≫ Hp-ux Version11.22
Sun ≫ Solaris Version2.5.1 Editionppc
Sun ≫ Solaris Version2.5.1 Editionx86
Sun ≫ Solaris Version2.6
Sun ≫ Solaris Version7.0 Editionx86
Sun ≫ Solaris Version8.0 Editionx86
Sun ≫ Solaris Version9.0 Editionsparc
Sun ≫ Solaris Version9.0 Editionx86
Sun ≫ Solaris Version9.0 Updatex86_update_2
Sun ≫ Sunos Version-
Sun ≫ Sunos Version5.5.1
Sun ≫ Sunos Version5.7
Sun ≫ Sunos Version5.8
Hp ≫ Cifs-9000 Server Versiona.01.05
Hp ≫ Cifs-9000 Server Versiona.01.06
Hp ≫ Cifs-9000 Server Versiona.01.07
Hp ≫ Cifs-9000 Server Versiona.01.08
Hp ≫ Cifs-9000 Server Versiona.01.08.01
Hp ≫ Cifs-9000 Server Versiona.01.09
Hp ≫ Cifs-9000 Server Versiona.01.09.01
Hp ≫ Cifs-9000 Server Versiona.01.09.02
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 84.5% 0.997
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=104974612519064&w=2
http://www.debian.org/security/2003/dsa-280
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:044
http://www.redhat.com/support/errata/RHSA-2003-137.html
ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624
http://marc.info/?l=bugtraq&m=104972664226781&w=2
http://marc.info/?l=bugtraq&m=104981682014565&w=2
http://marc.info/?l=bugtraq&m=104994564212488&w=2
http://www.digitaldefense.net/labs/advisories/DDI-1013.txt
http://www.kb.cert.org/vuls/id/267873
US Government Resource
http://www.novell.com/linux/security/advisories/2003_025_samba.html
http://www.securityfocus.com/bid/7294
Patch
Vendor Advisory
Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567