CVE-2003-0201

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10...

10.0 HighPublic exploitFix available

CVE-2003-0201 is a high vulnerability (CVSS 10.0) in Samba, published April 7, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 84.6%, the 99th percentile. Fixed in samba 3.0.

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Exploit likelihood

84.6%Down 5.5 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2003-0201
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2003-0201
Updated: 2026-11-02

EUVDEUVD-2003-0196 No score

Record: EUVD-2003-0196
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6mm7-g5cc-wpx6 No score

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10...

Record: GHSA-6mm7-g5cc-wpx6
Updated: 2026-11-02

OSV No score

Record: CVE-2003-0201
Updated: 2026-11-02

OSVDEBIAN-CVE-2003-0201 No score

Record: DEBIAN-CVE-2003-0201
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`samba` Debian:12	before 3.0	3.0
`samba` Debian:13	before 3.0	3.0
`samba` Debian:14	before 3.0	3.0
`samba` Debian:3.0	before 2.2.3a-12.3	2.2.3a-12.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Samba < 2.2.8 (Linux/BSD) - Remote Code Execution	2003-04-10
Exploit-DB	Samba 2.2.8 (Solaris SPARC) - 'trans2open' Remote Overflow (Metasploit)	2010-06-21
Exploit-DB	Samba 2.2.8 (Linux x86) - 'trans2open' Remote Overflow (Metasploit)	2010-07-14
Exploit-DB	Samba 2.2.8 (OSX/PPC) - 'trans2open' Remote Overflow (Metasploit)	2010-06-21
Exploit-DB	Samba 2.2.8 (BSD x86) - 'trans2open' Remote Overflow (Metasploit)	2010-06-17
Exploit-DB	Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (1)	2003-04-11
Exploit-DB	Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (2)	2003-04-07
Exploit-DB	Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (3)	2003-05-12
Exploit-DB	Samba 2.2.x - 'call_trans2open' Remote Buffer Overflow (4)	2003-04-07
Exploit-DB	Samba 2.2.8 - Brute Force Method Remote Command Execution	2003-07-13

Show 9 moreShow less

Public exploits
Source	Link	Date
Exploit-DB	Samba 2.2.x - Remote Buffer Overflow	2003-04-07
Exploit-DB	Samba 2.2.0 < 2.2.8 (OSX) - trans2open Overflow (Metasploit)	2003-04-07
Metasploit	Samba trans2open Overflow (*BSD x86)	2003-04-07
Metasploit	Samba trans2open Overflow (Linux x86)	2003-04-07
Metasploit	Samba trans2open Overflow (Mac OS X PPC)	2003-04-07
Metasploit	Samba trans2open Overflow (Solaris SPARC)	2003-04-07
PoC in GitHub	KernelPan1k/trans2open-CVE-2003-0201	2021-04-12
PoC in GitHub	americooo/pentest-writeups	2026-06-16
PoC in GitHub	deepakkcybersec-eng/Kioptrix-Level1-Vulnerability-Analysis	2025-12-24

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

References

Show 11 moreShow less