HP Cifs-9000 Server vulnerabilities

7 CVEs affecting HP Cifs-9000 Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-0201, published 2003-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0085, published 2003-03-31. High severity, CVSS 10.0. EPSS: 86.4% chance of exploitation in the next 30 days. Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
CVE-2003-0201, published 2003-05-05. High severity, CVSS 10.0. EPSS: 84.5% chance of exploitation in the next 30 days. Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary…
CVE-2002-1318, published 2002-12-11. High severity, CVSS 10.0. EPSS: 51.9% chance of exploitation in the next 30 days. Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during…
CVE-2003-0196, published 2003-05-05. High severity, CVSS 10.0. EPSS: 22.8% chance of exploitation in the next 30 days. Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than…
CVE-2001-1162, published 2001-06-23. High severity, CVSS 10.0. EPSS: 12% chance of exploitation in the next 30 days. Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is…
CVE-2001-0981, published 2001-08-31. High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days. HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause…
CVE-2002-0991, published 2002-10-04. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4)…