Vulnerability Details : CVE-2003-0686
Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.
Vulnerability category: OverflowExecute code
Products affected by CVE-2003-0686
- cpe:2.3:a:redhat:pam_smb:1.1.6-7:*:i386:*:*:*:*:*
- cpe:2.3:a:redhat:pam_smb:1.1.6-2:*:i386:*:*:*:*:*
- cpe:2.3:a:redhat:pam_smb:1.1.6-2:*:ia64:*:*:*:*:*
- cpe:2.3:a:redhat:pam_smb:1.1.6-5:*:i386:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:2.0_rc4:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:dave_airlie:pam_smb:1.1.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-0686
72.48%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-0686
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2003-0686
-
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000734
-
http://www.kb.cert.org/vuls/id/680260
US Government Resource
-
http://marc.info/?l=bugtraq&m=106252769930090&w=2
-
http://us2.samba.org/samba/ftp/pam_smb/
-
http://www.turbolinux.com/security/TLSA-2003-50.txt
-
http://www.debian.org/security/2003/dsa-374
Patch;Vendor Advisory
-
http://www.redhat.com/support/errata/RHSA-2003-261.html
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A469
-
http://www.redhat.com/support/errata/RHSA-2003-262.html
Patch;Vendor Advisory
Jump to