National Vulnerability Database (CVE-2003-0201)

National Cyber-Alert System Vulnerability Summary: CVE-2003-0201
Orirignal release date: 2003-05-05 Source: US-CERT/NIST ### Overview Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: The Aims Group Name: m=104972664226781& Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: Debian Name: samba -- buffer overflow Hyperlink: http://www.debian.org/security/2003/dsa-280 External Source: Security Focus Name: bid 7294 Hyperlink: http://www.securityfocus.com/bid/7294 External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: MISC Name: http://www.digitaldefense.net/labs/advisories/DDI-1013.txt Hyperlink: http://www.digitaldefense.net/labs/advisories/DDI-1013.txt External Source: SUSE Name: SuSE-SA:2003:025 Hyperlink: http://www.novell.com/linux/security/advisories/2003_025_samba.html External Source: MANDRAKE Name: MDKSA-2003:044 Hyperlink: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:044 External Source: REDHAT Name: RHSA-2003:137 Hyperlink: http://www.redhat.com/support/errata/RHSA-2003-137.html External Source: CONECTIVA Name: amp Hyperlink: http://distro.conectiva.com.br/atualizacoes/?id=a& External Source: SGI Name: 20030403-01-P Hyperlink: ftp://patches.sgi.com/support/free/security/advisories/20030403-01-P External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: BUGTRAQ Name: amp Hyperlink: http://marc.theaimsgroup.com/?l=bugtraq& External Source: OVAL Name: OVAL567 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval567.html External Source: OVAL Name: OVAL2163 Hyperlink: http://oval.mitre.org/oval/definitions/data/oval2163.html External Source: CERT-VN Name: VU#267873 Hyperlink: http://www.kb.cert.org/vuls/id/267873 ### Vulnerable Software and Vendor Samba-TNG (Samba-TNG) Tru64 (Compaq) Mac OS X (Apple) Samba (Samba) Solaris (Sun) HP-UX (HP) CIFS/9000 Server (HP) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0201