CVE-2003-0201: Apple Mac OS X

High severity, CVSS 10.0. EPSS: 84.5% chance of exploitation in the next 30 days.

Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

Affected products

• Apple Mac OS X: version 10.2 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only
• Compaq TRU64: version 4.0b only; version 4.0d only; version 4.0d_pk9_bl17 only; version 4.0f only; version 4.0f_pk6_bl17 only; version 4.0f_pk7_bl18 only; …
• HP Cifs-9000 Server: version a.01.05 only; version a.01.06 only; version a.01.07 only; version a.01.08 only; version a.01.08.01 only; version a.01.09 only; …
• HP HP-Ux: version 10.01 only; version 10.20 only; version 10.24 only; version 11.00 only; version 11.04 only; version 11.11 only; …
• Samba Samba: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …
• Samba-Tng Samba-Tng: version 0.3 only; version 0.3.1 only
• Sun Solaris: version 2.5.1 only; version 2.6 only; version 7.0 only; version 8.0 only; version 9.0 only
• Sun Sunos: affected versions not specified; version 5.5.1 only; version 5.7 only; version 5.8 only

Published 2003-05-05. Last modified 2026-06-16.