CVEvulnerability

CVE-2007-2447

6.0 MEDIUM Published 2007-05-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-05-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P

Description

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

Affected configurations

• samba samba 3.0.0 • samba samba 3.0.1 • samba samba 3.0.2 • samba samba 3.0.2a • samba samba 3.0.3 • samba samba 3.0.4 • samba samba 3.0.5 • samba samba 3.0.6 • samba samba 3.0.7 • samba samba 3.0.8 • samba samba 3.0.9 • samba samba 3.0.10 • samba samba 3.0.11 • samba samba 3.0.12 • samba samba 3.0.13 • samba samba 3.0.14 • samba samba 3.0.14a • samba samba 3.0.15 • samba samba 3.0.16 • samba samba 3.0.17 • samba samba 3.0.18 • samba samba 3.0.19 • samba samba 3.0.20 • samba samba 3.0.20a • samba samba 3.0.20b • samba samba 3.0.21 • samba samba 3.0.21a • samba samba 3.0.21b • samba samba 3.0.21c • samba samba 3.0.22 • samba samba 3.0.23 • samba samba 3.0.23a • samba samba 3.0.23b • samba samba 3.0.23c • samba samba 3.0.23d • samba samba 3.0.24 • samba samba 3.0.25

References

http://docs.info.apple.com/article.html?artnum=306172 docs.info.apple.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 h20000.www2.hp.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 labs.idefense.com
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html lists.apple.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html lists.grok.org.uk
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html lists.suse.com
http://secunia.com/advisories/25232 Vendor Advisory
http://secunia.com/advisories/25241 Vendor Advisory
http://secunia.com/advisories/25246 Vendor Advisory
http://secunia.com/advisories/25251 Vendor Advisory
http://secunia.com/advisories/25255 Vendor Advisory
http://secunia.com/advisories/25256 Vendor Advisory
http://secunia.com/advisories/25257 Vendor Advisory
http://secunia.com/advisories/25259 Vendor Advisory
http://secunia.com/advisories/25270 Vendor Advisory
http://secunia.com/advisories/25289 secunia.com
http://secunia.com/advisories/25567 secunia.com
http://secunia.com/advisories/25675 secunia.com
http://secunia.com/advisories/25772 secunia.com
http://secunia.com/advisories/26083 secunia.com
http://secunia.com/advisories/26235 secunia.com
http://secunia.com/advisories/26909 secunia.com
http://secunia.com/advisories/27706 secunia.com
http://secunia.com/advisories/28292 secunia.com
http://security.gentoo.org/glsa/glsa-200705-15.xml security.gentoo.org
http://securityreason.com/securityalert/2700 securityreason.com
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 slackware.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 sunsolve.sun.com
http://www.debian.org/security/2007/dsa-1291 www.debian.org
http://www.kb.cert.org/vuls/id/268336 US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 www.mandriva.com
http://www.novell.com/linux/security/advisories/2007_14_sr.html www.novell.com
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html www.openpkg.com
http://www.osvdb.org/34700 www.osvdb.org
http://www.redhat.com/support/errata/RHSA-2007-0354.html www.redhat.com
http://www.samba.org/samba/security/CVE-2007-2447.html Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/468565/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/archive/1/468670/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/23972 www.securityfocus.com
http://www.securityfocus.com/bid/25159 www.securityfocus.com
http://www.securitytracker.com/id?1018051 www.securitytracker.com
http://www.trustix.org/errata/2007/0017/ www.trustix.org
http://www.ubuntu.com/usn/usn-460-1 www.ubuntu.com
http://www.vupen.com/english/advisories/2007/1805 www.vupen.com
http://www.vupen.com/english/advisories/2007/2079 www.vupen.com
http://www.vupen.com/english/advisories/2007/2210 www.vupen.com
http://www.vupen.com/english/advisories/2007/2281 www.vupen.com
http://www.vupen.com/english/advisories/2007/2732 www.vupen.com
http://www.vupen.com/english/advisories/2007/3229 www.vupen.com
http://www.vupen.com/english/advisories/2008/0050 www.vupen.com
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf www.xerox.com
https://issues.rpath.com/browse/RPL-1366 issues.rpath.com
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 oval.cisecurity.org
http://docs.info.apple.com/article.html?artnum=306172 docs.info.apple.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 h20000.www2.hp.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 labs.idefense.com
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html lists.apple.com
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html lists.grok.org.uk
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html lists.suse.com
http://secunia.com/advisories/25232 Vendor Advisory
http://secunia.com/advisories/25241 Vendor Advisory
http://secunia.com/advisories/25246 Vendor Advisory
http://secunia.com/advisories/25251 Vendor Advisory
http://secunia.com/advisories/25255 Vendor Advisory
http://secunia.com/advisories/25256 Vendor Advisory
http://secunia.com/advisories/25257 Vendor Advisory
http://secunia.com/advisories/25259 Vendor Advisory
http://secunia.com/advisories/25270 Vendor Advisory
http://secunia.com/advisories/25289 secunia.com
http://secunia.com/advisories/25567 secunia.com
http://secunia.com/advisories/25675 secunia.com
http://secunia.com/advisories/25772 secunia.com
http://secunia.com/advisories/26083 secunia.com
http://secunia.com/advisories/26235 secunia.com
http://secunia.com/advisories/26909 secunia.com
http://secunia.com/advisories/27706 secunia.com
http://secunia.com/advisories/28292 secunia.com