CVE-2007-2407
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does...
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
Exploit likelihood
What each source reports
NVD Score used
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
- Record
CVE-2007-2407- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
- Record
CVE-2007-2407- Updated
- 2026-11-02
EUVDEUVD-2007-2402 No score
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
- Record
EUVD-2007-2402- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jv6m-h4m5-f426 No score
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does...
The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota.
- Record
GHSA-jv6m-h4m5-f426- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2407 is a medium vulnerability (CVSS 4.0) in Samba Server, published August 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.47%, the 89th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2007/2732
exchange.xforce.ibmcloud.com/vulnerabilities/35738
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
docs.info.apple.com/article.html?artnum=306172
securityfocus.com/bid/25159
secunia.com/advisories/26235
nvd.nist.gov/vuln/detail/CVE-2007-2407
github.com/advisories/GHSA-jv6m-h4m5-f426