CVE-2003-0085

Description

Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 86.07% Top 5%

Vendor Advisory gentoo.org Vendor Advisory securityfocus.com Vendor Advisory redhat.com Vendor Advisory redhat.com Vendor Advisory novell.com Vendor Advisory mandriva.com Vendor Advisory securityfocus.com Vendor Advisory debian.org Vendor Advisory sgi.com Vendor Advisory securityfocus.com

Affected: n/a n/a

References

Link	Tags
http://marc.info/?l=bugtraq&m=104792723017768&w=2	mailing list
http://marc.info/?l=bugtraq&m=104792646416629&w=2	mailing list
http://www.gentoo.org/security/en/glsa/glsa-200303-11.xml	vendor advisory
http://www.securityfocus.com/archive/1/316165/30/25370/threaded	mailing list vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-096.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A552	vdb entry signature
http://marc.info/?l=bugtraq&m=104801012929374&w=2	mailing list
http://www.securityfocus.com/bid/7106	vdb entry patch vendor advisory
http://www.redhat.com/support/errata/RHSA-2003-095.html	vendor advisory
http://www.kb.cert.org/vuls/id/298233	third party advisory us government resource
http://www.novell.com/linux/security/advisories/2003_016_samba.html	vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2003:032	vendor advisory
http://www.securityfocus.com/archive/1/317145/30/25220/threaded	mailing list vendor advisory
http://www.debian.org/security/2003/dsa-262	patch vendor advisory
http://secunia.com/advisories/8303	third party advisory
ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I	vendor advisory
http://secunia.com/advisories/8299	third party advisory

Frequently Asked Questions

What is the severity of CVE-2003-0085?: CVE-2003-0085 has been scored as a critical severity vulnerability.
How to fix CVE-2003-0085?: To fix CVE-2003-0085, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2003-0085 being actively exploited in the wild?: It is possible that CVE-2003-0085 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~86% probability that this vulnerability will be exploited by malicious actors in the next 30 days.