Skip to main content
← All vulnerabilities
CVE-2003-0201

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG

Published
Last modified
published
Not listed in CISA KEV
12 on Exploit-DB, 4 Metasploit modules, 3 proofs of concept on GitHub

Summary

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Timeline

  1. Public exploit on Exploit-DB

    EDB-7, EDB-9924, EDB-22469, EDB-22471, EDB-10, EDB-22468, EDB-22470, EDB-55, EDB-16880, EDB-16876, EDB-16330, EDB-16861

  2. CVE published
  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 34

distro.conectiva.com.br

marc.info

patches.sgi.com

novell.com

securityfocus.com

digitaldefense.net

debian.org

kb.cert.org

mandriva.com

redhat.com

oval.cisecurity.org

Exploit-DB

GitHub · rapid7/metasploit-framework

GitHub · KernelPan1k/trans2open-CVE-2003-0201

GitHub · americooo/pentest-writeups

GitHub · deepakkcybersec-eng/Kioptrix-Level1-Vulnerability-Analysis