CVE-2003-0201
EXPLOITEDSamba < 2.2.8a and 2.0.10 - Remote Code Execution via call_trans2open Buffer Overflow
Title source: llmExploitation Summary
CVE-2003-0201 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 19 public exploits from researchers including Metasploit, Schizoprenic, eDSee, including a Metasploit module exploits/solaris/samba/trans2open.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in Samba versions 2.2.0 to 2.2.8 on x86 Linux systems. It leverages the trans2open vulnerability (CVE-2003-0201) to achieve remote code execution by overwriting the return address on the stack.
Description
Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.
Exploits (19)
This is a Metasploit module exploiting a buffer overflow in Samba versions 2.2.0 to 2.2.8 on x86 Linux systems. It leverages the trans2open vulnerability (CVE-2003-0201) to achieve remote code execution by overwriting the return address on the stack.
This is a Metasploit module exploiting a buffer overflow in Samba versions 2.2.0 to 2.2.8 on Solaris SPARC systems. It uses a brute-force approach to bypass stack randomization and achieve remote code execution.
This is a Metasploit module exploiting a buffer overflow in Samba versions 2.2.0 to 2.2.8 on Mac OS X PowerPC systems. It uses a brute-force approach to target return addresses and delivers a payload via a malformed SMB trans2open request.
This is a Metasploit module exploiting a buffer overflow in Samba versions 2.2.0 to 2.2.8 on x86 BSD systems. It uses a brute-force approach to bypass stack randomization and achieve remote code execution.
This exploit targets a vulnerability in Samba versions prior to 2.2.8, using a connect-back shellcode method to achieve remote root access. It includes shellcode for Linux and BSD systems and attempts to exploit the target via brute force.
This exploit targets a buffer overflow vulnerability in Samba versions prior to 2.2.8, allowing remote code execution via a connect-back shellcode payload. It includes shellcode for Linux and BSD systems and uses brute-force methods to achieve exploitation.
This exploit targets a buffer overflow vulnerability in Samba v2.2.x (CVE-2003-0201) by sending maliciously crafted SMB packets to overwrite memory and execute arbitrary shellcode. The shellcode binds a shell to port 10000, allowing remote command execution.
This is a remote root exploit for Samba 2.2.x and prior, targeting multiple Linux and BSD distributions. It leverages a buffer overflow vulnerability to execute shellcode, providing either a bind shell or reverse shell.
The provided text describes a buffer overflow vulnerability in Samba versions 2.2.8 and earlier, as well as Samba-TNG 0.3.1 and earlier. The vulnerability allows an anonymous user to execute arbitrary commands with the privileges of the Samba process by corrupting memory through excessive data input.
This exploit targets a buffer overflow vulnerability in Samba 2.2.x (CVE-2003-0201) by sending maliciously crafted packets to execute arbitrary shellcode. It includes a brute-force approach to guess the return address and establishes a reverse shell upon successful exploitation.
This is a Metasploit module exploiting a buffer overflow in Samba (CVE-2003-0201) on Mac OS X PowerPC systems. It uses a brute-force approach to target return addresses and delivers a payload via a malformed SMB trans2open request.
This is a functional exploit for CVE-2003-0201, targeting a buffer overflow in Samba 2.2.x via the 'trans2open' function. It supports both single-shot and brute-force modes to achieve remote code execution.
This repository contains a functional exploit for CVE-2003-0201, a buffer overflow vulnerability in Samba versions 2.2.0 to 2.2.8. The exploit uses a connect-back shellcode to achieve remote code execution on vulnerable systems.
This repository provides a detailed technical walkthrough of exploiting CVE-2003-0201, a Samba Trans2Open vulnerability, using tools like Metasploit. It includes steps for network discovery, vulnerability identification, exploitation, and mitigation techniques.
This repository provides a detailed technical analysis of the Kioptrix Level 1 vulnerability, focusing on CVE-2003-0201 (Samba trans2open heap overflow). It includes offensive and defensive strategies, remediation steps, and evidence of exploitation via Metasploit.
This Metasploit module exploits a buffer overflow in Samba versions 2.2.0 to 2.2.8 on Solaris SPARC systems without noexec stack protection. It uses a brute-force approach to overwrite the return address and execute shellcode.
This Metasploit module exploits a buffer overflow in Samba versions 2.2.0 to 2.2.8 on x86 Linux systems without noexec stack protection. It leverages a brute-force approach to bypass ASLR and achieve remote code execution.
This Metasploit module exploits a buffer overflow in Samba versions 2.2.0 to 2.2.8 on Mac OS X PowerPC systems via a malformed SMB trans2open request. It uses brute-forcing to bypass ASLR and delivers a payload for remote code execution.
This Metasploit module exploits a buffer overflow in Samba versions 2.2.0 to 2.2.8 on x86 BSD systems. It uses a brute-force approach to bypass stack randomization and achieve remote code execution.