CVE-2003-0201

CRITICAL ⚠ Exploit

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Affects 8 products across 6 vendors.

CVSS 2.010.0
EPSS84.6%
Percentile100th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
◆ AI Analysis — automated analysis, not human-reviewed

A critical buffer overflow vulnerability exists in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allowing remote attackers to execute arbitrary code.

BSID: BS-2003-GLOBAL-173972-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2003-0201?
A critical buffer overflow vulnerability exists in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allowing remote attackers to execute arbitrary code.
What is the CVSS score for CVE-2003-0201?
CVE-2003-0201 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 84.6%.
Is CVE-2003-0201 actively exploited?
Public exploit available for CVE-2003-0201. Exploitation risk elevated.
How do I remediate CVE-2003-0201?
Priority: IMMEDIATE. PSIRT: [email protected]
What systems are affected by CVE-2003-0201?
CVE-2003-0201 affects Apple Mac Os X; Compaq Tru64; Hp Hp-Ux, Cifs-9000 Server; Samba Samba; Samba-Tng Samba-Tng; Sun Solaris, Sunos.
Vulnerability Details
CVE IDCVE-2003-0201
BSIDBS-2003-GLOBAL-173972-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2003-05-05
Last Modified2026-06-16
ICS Relevance0%
SourceNVD
Official Description

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is triggered by a buffer overflow in the call_trans2open function, which can be exploited by sending a specially crafted SMB request to the affected Samba server. This can lead to arbitrary code execution with the privileges of the Samba service.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Apple Mac Os X 10.2 10.2.1 10.2.2 10.2.3 10.2.4
Compaq Tru64 4.0b 4.0d 4.0d_pk9_bl17 4.0f 4.0f_pk6_bl17 4.0f_pk7_bl18
+19 more4.0g 4.0g_pk3_bl17 5.0 5.0_pk4_bl17 5.0_pk4_bl18 5.0a 5.0a_pk3_bl17 5.0f 5.1 5.1_pk3_bl17 5.1_pk4_bl18 5.1_pk5_bl19 5.1_pk6_bl20 5.1a 5.1a_pk1_bl1 5.1a_pk2_bl2 5.1a_pk3_bl3 5.1b 5.1b_pk1_bl1
Hp Hp-Ux 10.01 10.20 10.24 11.00 11.04 11.11
+2 more11.20 11.22
Hp Cifs-9000 Server a.01.05 a.01.06 a.01.07 a.01.08 a.01.08.01 a.01.09
+2 morea.01.09.01 a.01.09.02
Samba Samba 2.0.0 2.0.1 2.0.2 2.0.3 2.0.4 2.0.5
+15 more2.0.6 2.0.7 2.0.8 2.0.9 2.0.10 2.2.0 2.2.0a 2.2.1a 2.2.3a 2.2.4 2.2.5 2.2.6 2.2.7 2.2.7a 2.2.8
Samba-Tng Samba-Tng 0.3 0.3.1
Sun Solaris 2.5.1 2.6 7.0 8.0 9.0
Sun Sunos 5.5.1 5.7 5.8
Remediation

No official vendor advisory link on record. See the CVE record →

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 8573 Days
CISA known-exploitedNot in KEV catalog
Public Exploit⚠ Available — Reference
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
Related CVEs affecting Apple
CVE-2013-1374 10.0 Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.... CVE-2013-5329 10.0 Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.... CVE-2015-3061 10.0 Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windo... CVE-2015-5101 10.0 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.15 ... CVE-2015-7641 10.0 Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x...
View all Apple CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →