What is CVE-2003-0201?

CVE-2003-0201 is a vulnerability in Apple Mac OS X. Published 2003-05-05.

Is CVE-2003-0201 known to be exploited?

57 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apple Mac OS X

CVE-2003-0201

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Published 2003-05-05 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.845 (99.7th percentile), scored 2026-10-17.

High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.845 · newest: 0.845 · change: 0.000

Affected products

Apple Mac OS X — versions 10.2, 10.2.1, 10.2.2
Compaq Tru64 — versions 4.0b, 4.0d, 4.0d_pk9_bl17
HP Cifs-9000 Server — versions a.01.05, a.01.06, a.01.07
HP Hp-Ux — versions 10.01, 10.20, 10.24
Samba — versions 2.0.0, 2.0.1, 2.0.2
Samba-Tng — versions 0.3, 0.3.1
Sun Solaris — versions 2.5.1, 2.6, 7.0
Sun Sunos — versions 5.5.1, 5.7, 5.8

Public proof-of-concept exploits

References

distro.conectiva.com.br/atualizacoes/ (vendor-advisory)
marc.info/ (mailing-list)
www.novell.com/linux/security/advisories/2003_025_samba.html (vendor-advisory)
www.securityfocus.com/bid/7294 (Exploit, Patch, vdb-entry, Vendor Advisory)
www.digitaldefense.net/labs/advisories/DDI-1013.txt
marc.info/ (mailing-list)
www.debian.org/security/2003/dsa-280 (vendor-advisory, Patch, Vendor Advisory)
marc.info/ (mailing-list)
www.kb.cert.org/vuls/id/267873 (US Government Resource, third-party-advisory)
www.mandriva.com/security/advisories (vendor-advisory)

Frequently asked questions

What is CVE-2003-0201?: CVE-2003-0201 is a vulnerability in Apple Mac OS X. Published 2003-05-05.
Is CVE-2003-0201 known to be exploited?: 57 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.