CVE-2007-0454
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows...
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
CVE-2007-0454- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
CVE-2007-0454- Updated
- 2026-11-02
EUVDEUVD-2007-0453 No score
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
EUVD-2007-0453- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mq9f-755p-rg7c No score
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows...
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
GHSA-mq9f-755p-rg7c- Weakness
- CWE-134
- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
CVE-2007-0454- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-0454 No score
Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitrary code via format string specifiers in a filename on an AFS file system, which is not properly handled during Windows ACL mapping.
- Record
DEBIAN-CVE-2007-0454- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 3.0.23d-5 | 3.0.23d-5 |
sambaDebian:13 |
before 3.0.23d-5 | 3.0.23d-5 |
sambaDebian:14 |
before 3.0.23d-5 | 3.0.23d-5 |
sambaDebian:3.1 From an advisory covering 2 CVEs |
before 3.0.14a-3sarge4, plus listed versions 3.0.14a-33.0.14a-3sarge13.0.14a-3sarge23.0.14a-3sarge3 |
3.0.14a-3sarge4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-0454 is a high vulnerability (CVSS 7.5) in Samba, published February 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.63%, the 93rd percentile. Fixed in samba 3.0.23d-5.
References
kb.cert.org/vuls/id/649732
secunia.com/advisories/24046
securityfocus.com/archive/1/459365/100/0/threaded
gentoo.org/security/en/glsa/glsa-200702-01.xml
openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
Show 21 moreShow less
securitytracker.com/id?1017588
vupen.com/english/advisories/2007/0483
issues.rpath.com/browse/RPL-1005
us1.samba.org/samba/security/CVE-2007-0454.html
osvdb.org/33101
mandriva.com/security/advisories?name=MDKSA-2007:034
trustix.org/errata/2007/0007
ubuntu.com/usn/usn-419-1
exchange.xforce.ibmcloud.com/vulnerabilities/32304
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.476916
debian.org/security/2007/dsa-1257
nvd.nist.gov/vuln/detail/CVE-2007-0454
github.com/advisories/GHSA-mq9f-755p-rg7c
security-tracker.debian.org/tracker/CVE-2007-0454