1. CVE-Search
  2. CVE-2002-1318
ID CVE-2002-1318
Summary Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
References
Vulnerable Configurations
  • cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*
    cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*
  • cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*
    cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:cifs-9000_server:a.01.08:*:*:*:*:*:*:*
    cpe:2.3:a:hp:cifs-9000_server:a.01.08:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:cifs-9000_server:a.01.08.01:*:*:*:*:*:*:*
    cpe:2.3:a:hp:cifs-9000_server:a.01.08.01:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:cifs-9000_server:a.01.09:*:*:*:*:*:*:*
    cpe:2.3:a:hp:cifs-9000_server:a.01.09:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 03-05-2018 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
oval via4
accepted 2005-03-09T07:56:00.000-04:00
class vulnerability
contributors
name Brian Soby
organization The MITRE Corporation
description Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
family unix
id oval:org.mitre.oval:def:1467
status accepted
submitted 2005-01-19T12:00:00.000-04:00
title Samba Encrypted Password DoS
version 35
redhat via4
advisories
rhsa
id RHSA-2002:266
refmap via4
bid 6210
bugtraq
  • 20021121 GLSA: samba
  • 20021129 [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba)
cert-vn VU#958321
ciac
  • N-019
  • N-023
conectiva CLA-2002:550
confirm http://us1.samba.org/samba/whatsnew/samba-2.2.7.html
debian DSA-200
hp HPSBUX0212-230
mandrake MDKSA-2002:081
sgi 20021204-01-I
sunalert 53580
suse SuSE-SA:2002:045
trustix TSLSA-2002-0080
xf samba-password-change-bo(10683)
Last major update 03-05-2018 - 01:29
Published 11-12-2002 - 05:00
Last modified 03-05-2018 - 01:29
Back to Top