7.2

CVE-2007-2444

EPSS 1.19%
Veröffentlicht 14.05.2007 21:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 37

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samba ≫ Samba Version3.0.23d

Samba ≫ Samba Version3.0.24

Samba ≫ Samba Version3.0.25 Updatepre2

Debian ≫ Debian Linux Version4.0

Debian ≫ Debian Linux Version5.0

Canonical ≫ Ubuntu Linux Version6.06

Canonical ≫ Ubuntu Linux Version6.10

Canonical ≫ Ubuntu Linux Version7.04

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.19%	0.782

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1

Broken Link

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html

Third Party Advisory

http://secunia.com/advisories/25255

Third Party Advisory

http://www.trustix.org/errata/2007/0017/

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980

Broken Link

http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html

Third Party Advisory

Mailing List

http://osvdb.org/34698

Broken Link

http://secunia.com/advisories/25232

Third Party Advisory

http://secunia.com/advisories/25241

Third Party Advisory

http://secunia.com/advisories/25246

Third Party Advisory

http://secunia.com/advisories/25251

Third Party Advisory

http://secunia.com/advisories/25256

Third Party Advisory

http://secunia.com/advisories/25259

Third Party Advisory

http://secunia.com/advisories/25270

Third Party Advisory

http://secunia.com/advisories/25289

Third Party Advisory

http://secunia.com/advisories/25675

Third Party Advisory

http://secunia.com/advisories/25772

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200705-15.xml

Third Party Advisory

http://securityreason.com/securityalert/2701

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906

Third Party Advisory

Mailing List

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1

Broken Link

http://www.debian.org/security/2007/dsa-1291

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:104

Broken Link

http://www.samba.org/samba/security/CVE-2007-2444.html

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/468548/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/archive/1/468670/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/23974

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1018049

Third Party Advisory

VDB Entry

http://www.ubuntu.com/usn/usn-460-1

Third Party Advisory

http://www.ubuntu.com/usn/usn-460-2

Third Party Advisory

http://www.vupen.com/english/advisories/2007/1805

Permissions Required

http://www.vupen.com/english/advisories/2007/2210

Permissions Required

http://www.vupen.com/english/advisories/2007/2281

Permissions Required

https://issues.rpath.com/browse/RPL-1366

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2007-2444

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2444

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2444

EUVD