CVE Database
/

CVE-2007-2444

Back to search

CVE-2007-2444

Published: May 14, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

VendorProductVersions

n/a

n/a

affected
n/a

References

GLSA-200705-15
vendor-advisory
x_refsource_GENTOO
25289
third-party-advisory
x_refsource_SECUNIA
ADV-2007-1805
vdb-entry
x_refsource_VUPEN
25772
third-party-advisory
x_refsource_SECUNIA
OpenPKG-SA-2007.012
vendor-advisory
x_refsource_OPENPKG
SUSE-SA:2007:031
vendor-advisory
x_refsource_SUSE
25270
third-party-advisory
x_refsource_SECUNIA
20070515 FLEA-2007-0017-1: samba
mailing-list
x_refsource_BUGTRAQ
ADV-2007-2281
vdb-entry
x_refsource_VUPEN
ADV-2007-2210
vdb-entry
x_refsource_VUPEN
HPSBTU02218
vendor-advisory
x_refsource_HP
2007-0017
vendor-advisory
x_refsource_TRUSTIX
1018049
vdb-entry
x_refsource_SECTRACK
USN-460-1
vendor-advisory
x_refsource_UBUNTU
2701
third-party-advisory
x_refsource_SREASON
25241
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:104
vendor-advisory
x_refsource_MANDRIVA
25256
third-party-advisory
x_refsource_SECUNIA
25259
third-party-advisory
x_refsource_SECUNIA
SSA:2007-134-01
vendor-advisory
x_refsource_SLACKWARE
102964
vendor-advisory
x_refsource_SUNALERT
DSA-1291
vendor-advisory
x_refsource_DEBIAN
SSRT071424
vendor-advisory
x_refsource_HP
25232
third-party-advisory
x_refsource_SECUNIA
25251
third-party-advisory
x_refsource_SECUNIA
200588
vendor-advisory
x_refsource_SUNALERT
USN-460-2
vendor-advisory
x_refsource_UBUNTU
25246
third-party-advisory
x_refsource_SECUNIA
34698
vdb-entry
x_refsource_OSVDB
25255
third-party-advisory
x_refsource_SECUNIA
23974
vdb-entry
x_refsource_BID
25675
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now