CVE-2002-2196: Samba

High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days.

Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.

Affected products

• Samba Samba: up to and including 2.2.4; version 1.9.17 only; version 1.9.18 only; version 2.0.0 only; version 2.0.5a only; version 2.2.1 only; …

Published 2002-12-31. Last modified 2026-06-16.