CLA-2002:550Vendor advisory
http://distro.conectiva.com.br/atualizacoes?id=a&anuncio=000550 CVE-2002-1318
Samba 2.2.2 - 2.2.6 nttrans Buffer Overflow
Record summary
CVE-2002-1318 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
MetasploitSamba 2.2.2 - 2.2.6 nttrans Buffer OverflowMetasploit exploitby hdm <x@hdm.io>Not analyzed1 file
References
Showing 12 of 1620021121 GLSA: sambamailing list
http://marc.info/?l=bugtraq&m=103801986818076&w=2 20021129 [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba)mailing list
http://marc.info/?l=bugtraq&m=103859045302448&w=2 53580Vendor advisory
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/53580 us1.samba.orgConfirmation
http://us1.samba.org/samba/whatsnew/samba-2.2.7.html N-019Third-party advisoryGovernment resource
http://www.ciac.org/ciac/bulletins/n-019.shtml HPSBUX0212-230Vendor advisory
http://www.ciac.org/ciac/bulletins/n-023.shtml DSA-200Vendor advisory
http://www.debian.org/security/2002/dsa-200 VU#958321Third-party advisory
http://www.kb.cert.org/vuls/id/958321 MDKSA-2002:081Vendor advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-081.php SuSE-SA:2002:045Vendor advisory
http://www.novell.com/linux/security/advisories/2002_045_samba.html RHSA-2002:266Vendor advisory
http://www.redhat.com/support/errata/RHSA-2002-266.html