peter bassill · operator
$ cve CVE-2003-0201 JSON

CVE-2003-0201 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 84.5% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS84.5% — more likely to be exploited than 100% of all CVEs
On CISA KEVno
Public exploityes
Published2003-05-05
Last modified2026-06-16

Affected (8)

VendorProduct
applemac os x
compaqtru64
hpcifs-9000 server
hphp-ux
sambasamba
samba-tngsamba-tng
sunsolaris
sunsunos

Public exploits

SourceTitleDate
exploit-dbSamba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)2010-07-14
exploit-dbSamba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)2010-06-21
exploit-dbSamba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit)2010-06-21
exploit-dbSamba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow (Metasploit)2010-06-17
exploit-dbSamba 2.2.8 - Brute Force Method Remote Command Execution2003-07-13
exploit-dbSamba 2.2.x - 'call_trans2open' Remote Buffer Overflow (3)2003-05-12
exploit-dbSamba 2.2.x - 'call_trans2open' Remote Buffer Overflow (1)2003-04-11
exploit-dbSamba < 2.2.8 (Linux/BSD) - Remote Code Execution2003-04-10
exploit-dbSamba 2.2.x - 'call_trans2open' Remote Buffer Overflow (2)2003-04-07
exploit-dbSamba 2.2.x - 'call_trans2open' Remote Buffer Overflow (4)2003-04-07
exploit-dbSamba 2.2.x - Remote Buffer Overflow2003-04-07
exploit-dbSamba 2.2.0 < 2.2.8 (OSX) - trans2open Overflow (Metasploit)2003-04-07

References

→ the Explorer  ·  watch your stack  ·  NVD