CVE-2003-0201
HIGH 10.0EPSS 84.6%
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
- CVSS v2.0 NVD
- 10.0 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 84.62% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2003-04-15
- Updated
- 2024-08-08
Proof-of-concept exploits (2)
- KernelPan1k/trans2open-CVE-2003-02012★ · 2021-04-12
- rebekattan/Reporte-de-Resultados0★ · 2021-05-22
Metasploit modules (4)
- rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/samba/trans2open.rb
- rapid7/metasploit-framework/blob/master/modules/exploits/linux/samba/trans2open.rb
- rapid7/metasploit-framework/blob/master/modules/exploits/osx/samba/trans2open.rb
- rapid7/metasploit-framework/blob/master/modules/exploits/solaris/samba/trans2open.rb
ExploitDB entries (8)
- https://www.exploit-db.com/exploits/22471
- https://www.exploit-db.com/exploits/22470
- https://www.exploit-db.com/exploits/22469
- https://www.exploit-db.com/exploits/22468
- https://www.exploit-db.com/exploits/16880
- https://www.exploit-db.com/exploits/16876
- https://www.exploit-db.com/exploits/16861
- https://www.exploit-db.com/exploits/16330
Security advisories
- http://www.debian.org/security/2003/dsa-280
- http://www.securityfocus.com/bid/7294
- http://www.kb.cert.org/vuls/id/267873
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:044
- http://www.redhat.com/support/errata/RHSA-2003-137.html