6

CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

Data is provided by the National Vulnerability Database (NVD)
Samba ≫ Samba Version3.0.0
Samba ≫ Samba Version3.0.1
Samba ≫ Samba Version3.0.2
Samba ≫ Samba Version3.0.2a
Samba ≫ Samba Version3.0.3
Samba ≫ Samba Version3.0.4
Samba ≫ Samba Version3.0.4 Updaterc1
Samba ≫ Samba Version3.0.5
Samba ≫ Samba Version3.0.6
Samba ≫ Samba Version3.0.7
Samba ≫ Samba Version3.0.8
Samba ≫ Samba Version3.0.9
Samba ≫ Samba Version3.0.10
Samba ≫ Samba Version3.0.11
Samba ≫ Samba Version3.0.12
Samba ≫ Samba Version3.0.13
Samba ≫ Samba Version3.0.14
Samba ≫ Samba Version3.0.14a
Samba ≫ Samba Version3.0.15
Samba ≫ Samba Version3.0.16
Samba ≫ Samba Version3.0.17
Samba ≫ Samba Version3.0.18
Samba ≫ Samba Version3.0.19
Samba ≫ Samba Version3.0.20
Samba ≫ Samba Version3.0.20a
Samba ≫ Samba Version3.0.20b
Samba ≫ Samba Version3.0.21
Samba ≫ Samba Version3.0.21a
Samba ≫ Samba Version3.0.21b
Samba ≫ Samba Version3.0.21c
Samba ≫ Samba Version3.0.22
Samba ≫ Samba Version3.0.23
Samba ≫ Samba Version3.0.23a
Samba ≫ Samba Version3.0.23b
Samba ≫ Samba Version3.0.23c
Samba ≫ Samba Version3.0.23d
Samba ≫ Samba Version3.0.24
Samba ≫ Samba Version3.0.25 Updatepre1
Samba ≫ Samba Version3.0.25 Updatepre2
Samba ≫ Samba Version3.0.25 Updaterc1
Samba ≫ Samba Version3.0.25 Updaterc2
Samba ≫ Samba Version3.0.25 Updaterc3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 60.9% 0.982
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P