VDB
CVE-2003-0085
CVE-2003-0085
PUBLISHED
CVSS 10 CRITICAL
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
EPSS 86.42% · 99.7th percentile
Risk Scores
CVSS 2.0
10
EPSS Score
86.42%
99.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| hp | cifs-9000_server | a.01.05, a.01.06, a.01.07 |
| samba | samba | 2.0.1, 2.0.2, 2.0.3 |
Timeline
- Mar 18, 2003 CVE Published
- Apr 28, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
References
- 20030318 [OpenPKG-SA-2003.021] OpenPKG Security Advisory (samba) mailing-list
- ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I technical
- http://marc.info/?l=bugtraq&m=104792723017768&w=2 technical
- http://secunia.com/advisories/8303 technical
- http://www.debian.org/security/2003/dsa-262 patch
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:032 technical
- http://secunia.com/advisories/8299 technical
- http://www.gentoo.org/security/en/glsa/glsa-200303-11.xml technical
- http://www.kb.cert.org/vuls/id/298233 advisory
- http://www.redhat.com/support/errata/RHSA-2003-095.html technical
- http://www.securityfocus.com/archive/1/316165/30/25370/threaded technical
- http://www.securityfocus.com/archive/1/317145/30/25220/threaded technical
- http://www.securityfocus.com/bid/7106 patch
- https://nvd.nist.gov/vuln/detail/CVE-2003-0085 advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A552 url
- http://marc.info/?l=bugtraq&m=104792646416629&w=2 url
- http://www.novell.com/linux/security/advisories/2003_016_samba.html url
- http://www.redhat.com/support/errata/RHSA-2003-096.html url