{"id":"CVE-2007-2447","aliases":["DEBIAN-CVE-2007-2447","DSA-1291-2","DTSA-41-1","EUVD-2007-2442","GHSA-xxqh-84mj-whcj","RHSA-2007:0354","openSUSE-SU-2024:10683-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to...","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","severity":{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.49759,"percentile":0.98905,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2007-05-14T21:00:00Z","modified":"2026-10-21T17:47:38Z","exploits":[{"source":"metasploit","id":"exploit/multi/samba/usermap_script","title":"Samba \"username map script\" Command Execution","type":"exploit","platform":"Unix","date":"2007-05-14","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/samba/usermap_script"},{"source":"exploitdb","id":"EDB-16320","title":"Samba 3.0.20 \u003c 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)","type":"remote","platform":"unix","date":"2010-08-18","verified":true,"url":"https://www.exploit-db.com/exploits/16320"},{"source":"pocgithub","id":"amriunix/CVE-2007-2447","title":"amriunix/CVE-2007-2447","date":"2018-08-03","url":"https://github.com/amriunix/CVE-2007-2447"},{"source":"pocgithub","id":"Unix13/metasploitable2","title":"Unix13/metasploitable2","date":"2019-07-05","url":"https://github.com/Unix13/metasploitable2"},{"source":"pocgithub","id":"b1fair/smb_usermap","title":"b1fair/smb_usermap","date":"2019-09-30","url":"https://github.com/b1fair/smb_usermap"},{"source":"pocgithub","id":"JoseBarrios/CVE-2007-2447","title":"JoseBarrios/CVE-2007-2447","date":"2020-01-20","url":"https://github.com/JoseBarrios/CVE-2007-2447"},{"source":"pocgithub","id":"3x1t1um/CVE-2007-2447","title":"3x1t1um/CVE-2007-2447","date":"2020-04-22","url":"https://github.com/3x1t1um/CVE-2007-2447"},{"source":"pocgithub","id":"xlcc4096/exploit-CVE-2007-2447","title":"xlcc4096/exploit-CVE-2007-2447","date":"2020-12-06","url":"https://github.com/xlcc4096/exploit-CVE-2007-2447"},{"source":"pocgithub","id":"WildfootW/CVE-2007-2447_Samba_3.0.25rc3","title":"WildfootW/CVE-2007-2447_Samba_3.0.25rc3","date":"2020-12-09","url":"https://github.com/WildfootW/CVE-2007-2447_Samba_3.0.25rc3"},{"source":"pocgithub","id":"Ziemni/CVE-2007-2447-in-Python","title":"Ziemni/CVE-2007-2447-in-Python","date":"2021-02-22","url":"https://github.com/Ziemni/CVE-2007-2447-in-Python"},{"source":"pocgithub","id":"0xKn/CVE-2007-2447","title":"0xKn/CVE-2007-2447","date":"2021-03-06","url":"https://github.com/0xKn/CVE-2007-2447"},{"source":"pocgithub","id":"ozuma/CVE-2007-2447","title":"ozuma/CVE-2007-2447","date":"2021-03-14","url":"https://github.com/ozuma/CVE-2007-2447"},{"source":"pocgithub","id":"G01d3nW01f/CVE-2007-2447","title":"G01d3nW01f/CVE-2007-2447","date":"2021-04-16","url":"https://github.com/G01d3nW01f/CVE-2007-2447"},{"source":"pocgithub","id":"Alien0ne/CVE-2007-2447","title":"Alien0ne/CVE-2007-2447","date":"2021-06-30","url":"https://github.com/Alien0ne/CVE-2007-2447"},{"source":"pocgithub","id":"3t4n/samba-3.0.24-CVE-2007-2447-vunerable-","title":"3t4n/samba-3.0.24-CVE-2007-2447-vunerable-","date":"2021-07-23","url":"https://github.com/3t4n/samba-3.0.24-CVE-2007-2447-vunerable-"},{"source":"pocgithub","id":"xbufu/CVE-2007-2447","title":"xbufu/CVE-2007-2447","date":"2021-10-03","url":"https://github.com/xbufu/CVE-2007-2447"},{"source":"pocgithub","id":"Nosferatuvjr/Samba-Usermap-exploit","title":"Nosferatuvjr/Samba-Usermap-exploit","date":"2022-05-10","url":"https://github.com/Nosferatuvjr/Samba-Usermap-exploit"},{"source":"pocgithub","id":"testaross4/CVE-2007-2447","title":"testaross4/CVE-2007-2447","date":"2022-05-13","url":"https://github.com/testaross4/CVE-2007-2447"},{"source":"pocgithub","id":"b33m0x00/CVE-2007-2447","title":"b33m0x00/CVE-2007-2447","date":"2022-07-20","url":"https://github.com/b33m0x00/CVE-2007-2447"},{"source":"pocgithub","id":"HerculesRD/PyUsernameMapScriptRCE","title":"HerculesRD/PyUsernameMapScriptRCE","date":"2022-08-07","url":"https://github.com/HerculesRD/PyUsernameMapScriptRCE"},{"source":"pocgithub","id":"Aviksaikat/CVE-2007-2447","title":"Aviksaikat/CVE-2007-2447","date":"2022-10-14","url":"https://github.com/Aviksaikat/CVE-2007-2447"},{"source":"pocgithub","id":"h3x0v3rl0rd/CVE-2007-2447","title":"h3x0v3rl0rd/CVE-2007-2447","date":"2022-10-25","url":"https://github.com/h3x0v3rl0rd/CVE-2007-2447"},{"source":"pocgithub","id":"bdunlap9/CVE-2007-2447_python","title":"bdunlap9/CVE-2007-2447_python","date":"2022-12-27","url":"https://github.com/bdunlap9/CVE-2007-2447_python"},{"source":"pocgithub","id":"MikeRega7/CVE-2007-2447-RCE","title":"MikeRega7/CVE-2007-2447-RCE","date":"2023-06-15","url":"https://github.com/MikeRega7/CVE-2007-2447-RCE"},{"source":"pocgithub","id":"ShivamDey/Samba-CVE-2007-2447-Exploit","title":"ShivamDey/Samba-CVE-2007-2447-Exploit","date":"2023-10-21","url":"https://github.com/ShivamDey/Samba-CVE-2007-2447-Exploit"},{"source":"pocgithub","id":"Juantos/cve-2007-2447","title":"Juantos/cve-2007-2447","date":"2024-01-28","url":"https://github.com/Juantos/cve-2007-2447"},{"source":"pocgithub","id":"IamLucif3r/CVE-2007-2447-Exploit","title":"IamLucif3r/CVE-2007-2447-Exploit","date":"2024-07-08","url":"https://github.com/IamLucif3r/CVE-2007-2447-Exploit"}],"exploits_more":19,"fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["3.0.25-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["3.0.25-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["3.0.25-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.25-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.25-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.25-1"}]}]},{"source":"osv","ecosystem":"Debian:4.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-6etch2"}]}],"versions":["3.0.24-6","3.0.24-6etch1"],"bundled":3},{"source":"osv","ecosystem":"Debian:3.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.14a-3sarge6"}]}],"versions":["3.0.14a-3","3.0.14a-3sarge1","3.0.14a-3sarge2","3.0.14a-3sarge3","3.0.14a-3sarge4"],"bundled":3},{"source":"osv","ecosystem":"Debian:5.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.24-6+lenny3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::aw","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:2.1::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.12-1.21as.6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-1.3E.13.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.10-1.4E.12.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.23c-2.el5.2.0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cifs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.13-1.3"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200705-15.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25289","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/2732","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/1805","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/26083","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/3229","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25772","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01067768","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/468565/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25257","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.kb.cert.org/vuls/id/268336","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource","web"]},{"url":"http://www.securityfocus.com/bid/23972","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/25270","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/archive/1/468670/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.novell.com/linux/security/advisories/2007_14_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","advisory"]},{"url":"http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","web"]},{"url":"http://www.vupen.com/english/advisories/2007/2281","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2210","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01078980","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://www.trustix.org/errata/2007/0017/","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/usn-460-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25567","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25241","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/28292","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.samba.org/samba/security/CVE-2007-2447.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","article"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:104","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25256","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://issues.rpath.com/browse/RPL-1366","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://secunia.com/advisories/25259","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security\u0026y=2007\u0026m=slackware-security.475906","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://www.osvdb.org/34700","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred","web"]},{"url":"http://secunia.com/advisories/26909","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0050","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/27706","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2007/dsa-1291","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id?1018051","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://docs.info.apple.com/article.html?artnum=306172","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://securityreason.com/securityalert/2700","tags":["third-party-advisory","x_refsource_SREASON","x_transferred","web"]},{"url":"http://secunia.com/advisories/25232","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://secunia.com/advisories/25251","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","web"]},{"url":"http://secunia.com/advisories/25246","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/25159","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://secunia.com/advisories/25255","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0354.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web"]},{"url":"http://secunia.com/advisories/26235","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/25675","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2079","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/10/16/2"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2447","tags":["advisory"]},{"url":"http://www.trustix.org/errata/2007/0017"},{"url":"https://github.com/advisories/GHSA-xxqh-84mj-whcj"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-2447","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2007:0354","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://www.samba.org/samba/security/CVE-2007-2446.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=239429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=239774","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0354.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2446","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2007-2447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2447","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14342","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2007-2447","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2007-05-14T21:00:00Z","modified":"2025-11-04T21:08:04.094Z","updated_at":"2026-11-02T13:32:34.372976Z"}],"euvd":[{"id":"EUVD-2007-2442","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2007-05-14T21:00:00Z","modified":"2025-11-04T21:08:04Z","updated_at":"2026-11-02T19:49:21.645169Z"}],"ghsa":[{"id":"GHSA-xxqh-84mj-whcj","title":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to...","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2022-05-01T18:03:36Z","modified":"2025-11-05T00:31:12Z","updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2007-2447","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2007-05-14T21:19:00Z","modified":"2026-06-16T22:39:37.017Z","cvss":[{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:15.696607Z"}],"osv":[{"id":"CVE-2007-2447","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2007-05-14T21:19:00Z","modified":"2026-04-10T03:39:05.691817Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-2447","description":"The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the \"username map script\" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.","status":"published","published":"2007-05-14T21:19:00Z","modified":"2026-10-21T17:47:38.440464077Z","updated_at":"2026-11-02T15:45:23.411908Z"},{"id":"DSA-1291-2","title":"samba","status":"published","published":"2007-05-17T00:00:00Z","modified":"2026-03-09T01:02:02.994673Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DTSA-41-1","title":"samba - several vulnerabilities","status":"published","published":"2007-05-31T00:00:00Z","modified":"2026-03-09T01:01:24.892227Z","updated_at":"2026-11-02T15:46:18.716547Z"},{"id":"openSUSE-SU-2024:10683-1","title":"cifs-utils-6.13-1.3 on GA media","description":"These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:27:26.032876Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"RHSA-2007:0354","title":"Red Hat Security Advisory: samba security update","status":"published","published":"2024-09-15T16:42:17Z","modified":"2026-06-26T10:06:21Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}