CVE-2002-1318: Buffer Overflow
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1318?
CVE-2002-1318 is considered a high severity vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2002-1318?
To fix CVE-2002-1318, upgrade Samba to version 2.2.7 or later, or apply any available patches from your vendor.
What systems are affected by CVE-2002-1318?
CVE-2002-1318 affects Samba versions 2.2.2 through 2.2.6 and various versions of SGI IRIX and HP CIFS/9000 Server.
What kind of attack does CVE-2002-1318 enable?
CVE-2002-1318 enables attackers to exploit a buffer overflow via an encrypted password, potentially allowing them to execute arbitrary code.
Is CVE-2002-1318 still a concern today?
While CVE-2002-1318 was disclosed in 2002, it remains a concern for systems that have not been adequately patched or upgraded.