CVE-2007-2447: samba

Modified

AliasesDEBIAN-CVE-2007-2447

Published 14-05-2007Last modified 04-11-2025

Vulnerability summary

CVE-2007-2447 is a medium (CVSS 6.0) vulnerability in samba. EPSS estimates a 49.76% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 18-08-2010)

Source freshness unavailable

How is this decided?

CVSS score

6.0/10

010

Medium · v2.0 (NVD)

EPSS score

49.76%

0%100%

High · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 5 · Related 2

DSA-1291-2 DTSA-41-1 OPENSUSE-SU-2024:10683-1 OPENSUSE-SU-2024:11365-1 RHSA-2007:0354

Timeline

14-05-2007
PublishedVulnerability first disclosed.
04-11-2025
Last modifiedVulnerability information updated.

Description

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

CVSS metrics

1 score · 1 source · 1 version

v2.06.0

EPSS trend

Probability

49.76%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 49.76% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaseremoteunixVerified
Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Samba "username map script" Command Execution
exploit/multi/samba/usermap_script
Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, authentication (CVSS vector). Other conditions: not stated in public data.

Debian1 product

samba< 3.0.25-1

Samba1 product

sambaEOL3.0.0 | 3.0.1 | 3.0.2 | 3.0.2a | 3.0.3 | 3.0.4 | 3.0.4:rc1 | 3.0.5 | 3.0.6 | 3.0.7 | 3.0.8 | 3.0.9 | 3.0.10 | 3.0.11 | 3.0.12 | 3.0.13 | 3.0.14 | 3.0.14a | 3.0.15 | 3.0.16 | 3.0.17 | 3.0.18 | 3.0.19 | 3.0.20 | 3.0.20a | 3.0.20b | 3.0.21 | 3.0.21a | 3.0.21b | 3.0.21c | 3.0.22 | 3.0.23 | 3.0.23a | 3.0.23b | 3.0.23c | 3.0.23d | 3.0.24 | 3.0.25:pre1 | 3.0.25:pre2 | 3.0.25:rc1 | 3.0.25:rc2 | 3.0.25:rc3

2 vendors · 2 products

References

57 links

security.gentoo.org/glsa/glsa-200705-15.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/25289Third Party AdvisoryX Refsource SECUNIA
lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.htmlMailing ListX Refsource FULLDISC
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062VDB EntrySignatureX Refsource OVAL
www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdfX Refsource CONFIRM
www.vupen.com/english/advisories/2007/2732VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2007/1805VDB EntryX Refsource VUPEN
secunia.com/advisories/26083Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/3229VDB EntryX Refsource VUPEN
secunia.com/advisories/25772Third Party AdvisoryX Refsource SECUNIA

Show all 57 references

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768Vendor AdvisoryX Refsource HP
www.securityfocus.com/archive/1/468565/100/0/threadedMailing ListX Refsource BUGTRAQ
www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.htmlVendor AdvisoryX Refsource OPENPKG
secunia.com/advisories/25257Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.kb.cert.org/vuls/id/268336Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/23972VDB EntryX Refsource BID
lists.suse.com/archive/suse-security-announce/2007-May/0006.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/25270Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/468670/100/0/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_14_sr.htmlVendor AdvisoryX Refsource SUSE
lists.apple.com/archives/security-announce//2007/Jul/msg00004.htmlVendor AdvisoryX Refsource APPLE
www.vupen.com/english/advisories/2007/2281VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2007/2210VDB EntryX Refsource VUPEN
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980Vendor AdvisoryX Refsource HP
www.trustix.org/errata/2007/0017/Vendor AdvisoryX Refsource TRUSTIX
www.ubuntu.com/usn/usn-460-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/25567Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25241Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28292Third Party AdvisoryX Refsource SECUNIA
www.samba.org/samba/security/CVE-2007-2447.htmlX Refsource CONFIRMPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:104Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/25256Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1366X Refsource CONFIRM
secunia.com/advisories/25259Third Party AdvisoryX Refsource SECUNIAVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906Vendor AdvisoryX Refsource SLACKWARE
www.osvdb.org/34700VDB EntryX Refsource OSVDB
sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1Vendor AdvisoryX Refsource SUNALERT
labs.idefense.com/intelligence/vulnerabilities/display.php?id=534Third Party AdvisoryX Refsource IDEFENSE
secunia.com/advisories/26909Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/0050VDB EntryX Refsource VUPEN
secunia.com/advisories/27706Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1291Vendor AdvisoryX Refsource DEBIAN
www.securitytracker.com/id?1018051VDB EntryX Refsource SECTRACK
docs.info.apple.com/article.html?artnum=306172X Refsource CONFIRM
securityreason.com/securityalert/2700Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/25232Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25251Third Party AdvisoryX Refsource SECUNIAVendor Advisory
sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/25246Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/25159VDB EntryX Refsource BID
secunia.com/advisories/25255Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-0354.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/26235Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25675Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/2079VDB EntryX Refsource VUPEN
www.openwall.com/lists/oss-security/2025/10/16/2
security-tracker.debian.org/tracker/CVE-2007-2447Advisory