CVE-2002-1318
samba 2.2.2-2.2.6 - Buffer Overflow via Encrypted Password Decryption
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1318.
PoCs published by hdm, including Metasploit module exploits/multi/samba/nttrans.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in Samba 2.2.2-2.2.6 via a malformed NTTrans request, allowing remote code execution. It uses a pattern to overwrite the EIP and injects a payload into the vulnerable process.
Description
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
Exploits (1)
This Metasploit module exploits a buffer overflow in Samba 2.2.2-2.2.6 via a malformed NTTrans request, allowing remote code execution. It uses a pattern to overwrite the EIP and injects a payload into the vulnerable process.