CVE-2003-0686: Dave Airlie Pam SMB

High severity, CVSS 7.5. EPSS: 27% chance of exploitation in the next 30 days.

Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.

Affected products

• Dave Airlie Pam SMB: version 1.1 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; …
• Red Hat Pam SMB: version 1.1.6-2 only; version 1.1.6-5 only; version 1.1.6-7 only

Published 2003-10-20. Last modified 2026-06-16.