Vulnerability Intelligence Report
CVE-2003-0196
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
No Active Exploit Signals
CVSS Base Score
10.0
HIGH
EPSS Probability:22.76%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| samba | samba | 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.2.0, 2.2.0a, 2.2.1a, 2.2.2, 2.2.3, 2.2.3a, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.7a, 2.2.8 |
| samba-tng | samba-tng | 0.3, 0.3.1 |
| compaq | tru64 | 4.0b, 4.0d, 4.0d_pk9_bl17, 4.0f, 4.0f_pk6_bl17, 4.0f_pk7_bl18, 4.0g, 4.0g_pk3_bl17, 5.0, 5.0_pk4_bl17, 5.0_pk4_bl18, 5.0a, 5.0a_pk3_bl17, 5.0f, 5.1, 5.1_pk3_bl17, 5.1_pk4_bl18, 5.1_pk5_bl19, 5.1_pk6_bl20, 5.1a, 5.1a_pk1_bl1, 5.1a_pk2_bl2, 5.1a_pk3_bl3, 5.1b, 5.1b_pk1_bl1 |
| hp | hp-ux | 10.01, 10.20, 10.24, 11.00, 11.04, 11.11, 11.20, 11.22 |
| sun | solaris | 2.5.1, 2.6, 7.0, 8.0, 9.0 |
| sun | sunos | 5.5.1, 5.7, 5.8 |
| hp | cifs-9000_server | a.01.05, a.01.06, a.01.07, a.01.08, a.01.08.01, a.01.09, a.01.09.01, a.01.09.02 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
22.760%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2003-04-01T00:00:00 |
| Published | 2003-04-15T04:00:00 |
| Patch Date | 2003-04-07 |
| Last Updated | 2024-08-08T01:43:36 |
Community Chatter & Buzz