CVE-2003-0201: apple mac_os_x

CVSS: 10.0v2.0HighModified

AliasesDEBIAN-CVE-2003-0201

Published 15-04-2003Last modified 08-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2003-0201 is a high (CVSS 10.0) vulnerability in apple mac_os_x. EPSS estimates a 84.50% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 17 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

84.50%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits17reference, exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1

DSA-280

Timeline

15-04-2003
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

84.50%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 84.50% on 18-09-2026

18-09-202618-10-2026

EPSS score

84.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

17 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotebsd_x86Verified
Samba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotelinuxVerified
Samba 2.2.8 - Brute Force Method Remote Command Execution
Maturity: weaponized

Show all 17 exploits

exploit-databaseremotelinuxVerified
Samba 2.2.x - Remote Buffer Overflow
Maturity: weaponized
exploit-databaseremotelinux_x86Verified
Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotemultipleVerified
Samba < 2.2.8 (Linux/BSD) - Remote Code Execution
Maturity: weaponized
exploit-databaseremoteosxVerified
Samba 2.2.0 < 2.2.8 (OSX) - trans2open Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremoteosx_ppcVerified
Samba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotesolaris_sparcVerified
Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremoteunixVerified
Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (1)
Maturity: weaponized
exploit-databaseremoteunixVerified
Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (2)
Maturity: weaponized
exploit-databaseremoteunixVerified
Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (3)
Maturity: weaponized
exploit-databaseremoteunixVerified
Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (4)
Maturity: weaponized
MetasploitremoteVerified
Samba trans2open Overflow (*BSD x86)
exploit/freebsd/samba/trans2open
Maturity: weaponized
MetasploitremoteVerified
Samba trans2open Overflow (Linux x86)
exploit/linux/samba/trans2open
Maturity: weaponized
MetasploitremoteVerified
Samba trans2open Overflow (Mac OS X PPC)
exploit/osx/samba/trans2open
Maturity: weaponized
MetasploitremoteVerified
Samba trans2open Overflow (Solaris SPARC)
exploit/solaris/samba/trans2open
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Hp2 products

cifs-9000_servera.01.05 | a.01.06 | a.01.07 | a.01.08 | a.01.08.01 | a.01.09 | a.01.09.01 | a.01.09.02
hp-ux10.01 | 10.20 | 10.24 | 11.00 | 11.04 | 11.11 | 11.20 | 11.22

Sun2 products

solaris2.5.1 | 2.6 | 7.0 | 8.0 | 9.0 | 9.0:x86_update_2
sunosna | 5.5.1 | 5.7 | 5.8

Apple1 product

mac_os_x10.2 | 10.2.1 | 10.2.2 | 10.2.3 | 10.2.4

Compaq1 product

tru644.0b | 4.0d | 4.0d_pk9_bl17 | 4.0f | 4.0f_pk6_bl17 | 4.0f_pk7_bl18 | 4.0g | 4.0g_pk3_bl17 | 5.0 | 5.0_pk4_bl17 | 5.0_pk4_bl18 | 5.0a | 5.0a_pk3_bl17 | 5.0f | 5.1 | 5.1_pk3_bl17 | 5.1_pk4_bl18 | 5.1_pk5_bl19 | 5.1_pk6_bl20 | 5.1a | 5.1a_pk1_bl1 | 5.1a_pk2_bl2 | 5.1a_pk3_bl3 | 5.1b | 5.1b_pk1_bl1

Debian1 product

samba< 3.0

Samba1 product

samba2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.4 | 2.0.5 | 2.0.6 | 2.0.7 | 2.0.8 | 2.0.9 | 2.0.10 | 2.2.0 | 2.2.0a | 2.2.1a | 2.2.3a | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.7a | 2.2.8

Samba-tng1 product

samba-tng0.3 | 0.3.1

7 vendors · 9 products

References

15 links

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000624Vendor AdvisoryX Refsource CONECTIVA
marc.info?l=bugtraq&m=104981682014565&w=2Mailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2003_025_samba.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/7294VDB EntryX Refsource BIDExploitPatchVendor Advisory
www.digitaldefense.net/labs/advisories/DDI-1013.txtX Refsource MISC
marc.info?l=bugtraq&m=104972664226781&w=2Mailing ListX Refsource BUGTRAQ
www.debian.org/security/2003/dsa-280Vendor AdvisoryX Refsource DEBIANPatch
marc.info?l=bugtraq&m=104994564212488&w=2Mailing ListX Refsource BUGTRAQ
www.kb.cert.org/vuls/id/267873Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.mandriva.com/security/advisories?name=MDKSA-2003:044Vendor AdvisoryX Refsource MANDRAKE

Show all 15 references

www.redhat.com/support/errata/RHSA-2003-137.htmlVendor AdvisoryX Refsource REDHAT
marc.info?l=bugtraq&m=104974612519064&w=2Mailing ListX Refsource BUGTRAQ
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A567VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2163VDB EntrySignatureX Refsource OVAL
security-tracker.debian.org/tracker/CVE-2003-0201Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities