CVE-2003-0686

PAM SMB <1.1.6 - RCE

Title source: llm

Description

Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.

Exploits (1)

exploitdb WORKING POC VERIFIED

by vertex · cremotelinux

https://www.exploit-db.com/exploits/89

View Code ZIP pw:eip

References (10)

[Various Sources] http://us2.samba.org/samba/ftp/pam_smb/

[Vendor Advisory] http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000734

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-261.html

[Mailing List] http://marc.info/?l=bugtraq&m=106252769930090&w=2

[Patch, Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2003-262.html

[US Government Resource] http://www.kb.cert.org/vuls/id/680260

[Third Party Advisory] http://secunia.com/advisories/9611

[Patch, Vendor Advisory] http://www.debian.org/security/2003/dsa-374

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A469

[Various Sources] http://www.turbolinux.com/security/TLSA-2003-50.txt

Scores

EPSS 0.4933

EPSS Percentile 97.8%

Details

Status published

Products (11)

dave_airlie/pam_smb 1.1

dave_airlie/pam_smb 1.1.1

dave_airlie/pam_smb 1.1.2

dave_airlie/pam_smb 1.1.3

dave_airlie/pam_smb 1.1.4

dave_airlie/pam_smb 1.1.5

dave_airlie/pam_smb 1.1.6

dave_airlie/pam_smb 2.0_rc4

redhat/pam_smb 1.1.6-2 (2 CPE variants)

redhat/pam_smb 1.1.6-5

... and 1 more

Published Oct 20, 2003

Tracked Since Feb 18, 2026