Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-2196
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.082
Percentile
94.4%
Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.
Affected configurations
Node
sambasambaRange≤2.2.4
ORsambasambaMatch1.9.17
ORsambasambaMatch1.9.17p1
ORsambasambaMatch1.9.17p3
ORsambasambaMatch1.9.17p4
ORsambasambaMatch1.9.17p5
ORsambasambaMatch1.9.18p1
ORsambasambaMatch1.9.18p10
ORsambasambaMatch1.9.18p2
ORsambasambaMatch1.9.18p3
ORsambasambaMatch1.9.18p4
ORsambasambaMatch1.9.18p5
ORsambasambaMatch1.9.18p6
ORsambasambaMatch1.9.18p7
ORsambasambaMatch1.9.18p8
ORsambasambaMatch2.0.0
ORsambasambaMatch2.0.5a
ORsambasambaMatch2.2.1
ORsambasambaMatch2.2.1a
ORsambasambaMatch2.2.3a
ORsambasambaMatch2.2a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samba | samba | * | cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* |
| samba | samba | 1.9.17 | cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:* |
| samba | samba | 1.9.17 | cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:* |
| samba | samba | 1.9.17 | cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:* |
| samba | samba | 1.9.17 | cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:* |
| samba | samba | 1.9.17 | cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:* |
| samba | samba | 1.9.18 | cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:* |
| samba | samba | 1.9.18 | cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:* |
| samba | samba | 1.9.18 | cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:* |
| samba | samba | 1.9.18 | cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:* |
Related
cve
cve
CVE-2002-2196
2005-11-16 21:17:00
cvelist
cvelist
CVE-2002-2196
2005-11-16 21:17:00
nessus
nessus
Samba enum_csc_policy Data Structure Termination Remote Overflow
2002-08-29 00:00:00
openvas
openvas
Samba Buffer Overflow Vulnerability (CVE-2002-2196)
2020-11-17 00:00:00
debiancve
debiancve
CVE-2002-2196
2005-11-16 21:17:00
redhatcve
redhatcve
CVE-2002-2196
2015-10-30 10:22:56
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.082
Percentile
94.4%
Related for NVD:CVE-2002-2196