CVE-2002-1318: HP Cifs-9000 Server

High severity, CVSS 10.0. EPSS: 51.9% chance of exploitation in the next 30 days.

Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.

Affected products

• HP Cifs-9000 Server: version a.01.08 only; version a.01.08.01 only; version a.01.09 only
• Samba Samba: version 2.2.2 only; version 2.2.3 only; version 2.2.4 only; version 2.2.5 only; version 2.2.6 only
• Sgi Irix: version 6.5 only; version 6.5.1 only; version 6.5.2 only; version 6.5.3 only; version 6.5.4 only; version 6.5.5 only; …

Published 2002-12-11. Last modified 2026-06-16.