CVE-2003-0086
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary...
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
Exploit likelihood
What each source reports
NVD Score used
1.2
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
CVE-2003-0086- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
CVE-2003-0086- Updated
- 2026-11-02
EUVDEUVD-2003-0082 No score
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
EUVD-2003-0082- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rcgr-jhj7-cx8m No score
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary...
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
GHSA-rcgr-jhj7-cx8m- Updated
- 2026-11-02
OSV No score
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
CVE-2003-0086- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0086 No score
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
- Record
DEBIAN-CVE-2003-0086- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0086 is a low vulnerability (CVSS 1.2) in Samba, published March 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.51%, the 43rd percentile. Fixed in samba 2.2.8.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A554
marc.info?l=bugtraq&m=104792646416629&w=2
gentoo.org/security/en/glsa/glsa-200303-11.xml
securityfocus.com/archive/1/316165/30/25370/threaded
redhat.com/support/errata/RHSA-2003-096.html
securityfocus.com/bid/7107
Show 10 moreShow less
marc.info?l=bugtraq&m=104801012929374&w=2
redhat.com/support/errata/RHSA-2003-095.html
novell.com/linux/security/advisories/2003_016_samba.html
mandriva.com/security/advisories?name=MDKSA-2003:032
debian.org/security/2003/dsa-262
secunia.com/advisories/8303
secunia.com/advisories/8299
nvd.nist.gov/vuln/detail/CVE-2003-0086
github.com/advisories/GHSA-rcgr-jhj7-cx8m
security-tracker.debian.org/tracker/CVE-2003-0086