CVE-2003-0085
Samba < 2.2.8 - Remote Code Execution via SMB/CIFS Packet Fragment Reassembly
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2003-0085. PoCs published by Metasploit, H D Moore, flatline.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Samba 2.2.2-2.2.6 via a malformed NTTrans request, leading to remote code execution.
Description
Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
Exploits (3)
This is a Metasploit module exploiting a buffer overflow in Samba 2.2.2-2.2.6 via a malformed NTTrans request, leading to remote code execution.
This exploit targets a buffer overflow vulnerability in Samba 2.2.x via a malformed NTTrans request. It leverages a pattern-based buffer overflow to achieve remote code execution by overwriting the return address and injecting payload.
This exploit targets a buffer overflow vulnerability in Samba <= 2.2.7a via a crafted SMB/CIFS packet. It leverages a stack-based overflow in the `reply_nttrans()` function to achieve remote code execution with root privileges.