Vulnerability in HP Cifs-9000 Server
CVE-2002-1318
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
EPSS: 0.519 (98.9th percentile) — read the EPSS interpretation.
Affected products
- Hp Cifs-9000_server — versions a.01.08, a.01.08.01, a.01.09
- Samba — versions 2.2.2, 2.2.3, 2.2.4
- Sgi Irix — versions 6.5, 6.5.1, 6.5.2
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vendor-advisory, x_refsource_SUSE)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (x_refsource_CIAC, third-party-advisory, x_refsource_HP, vendor-advisory, government-resource)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2002-1318?
- CVE-2002-1318 is a vulnerability in HP Cifs-9000 Server. Published 2002-12-11.
- Is CVE-2002-1318 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.