Back to search
CVE-2007-2447
Published: May 14, 2007
Modified: Nov 4, 2025
PUBLISHED
Description
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
GLSA-200705-15
vendor-advisory
x_refsource_GENTOO
25289
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10062
vdb-entry
signature
x_refsource_OVAL
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
x_refsource_CONFIRM
ADV-2007-2732
vdb-entry
x_refsource_VUPEN
ADV-2007-1805
vdb-entry
x_refsource_VUPEN
26083
third-party-advisory
x_refsource_SECUNIA
ADV-2007-3229
vdb-entry
x_refsource_VUPEN
25772
third-party-advisory
x_refsource_SECUNIA
HPSBUX02218
vendor-advisory
x_refsource_HP
20070513 [SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability
mailing-list
x_refsource_BUGTRAQ
OpenPKG-SA-2007.012
vendor-advisory
x_refsource_OPENPKG
25257
third-party-advisory
x_refsource_SECUNIA
VU#268336
third-party-advisory
x_refsource_CERT-VN
23972
vdb-entry
x_refsource_BID
SUSE-SA:2007:031
vendor-advisory
x_refsource_SUSE
25270
third-party-advisory
x_refsource_SECUNIA
20070515 FLEA-2007-0017-1: samba
mailing-list
x_refsource_BUGTRAQ
SUSE-SR:2007:014
vendor-advisory
x_refsource_SUSE
APPLE-SA-2007-07-31
vendor-advisory
x_refsource_APPLE
ADV-2007-2281
vdb-entry
x_refsource_VUPEN
ADV-2007-2210
vdb-entry
x_refsource_VUPEN
HPSBTU02218
vendor-advisory
x_refsource_HP
2007-0017
vendor-advisory
x_refsource_TRUSTIX
USN-460-1
vendor-advisory
x_refsource_UBUNTU
25567
third-party-advisory
x_refsource_SECUNIA
25241
third-party-advisory
x_refsource_SECUNIA
28292
third-party-advisory
x_refsource_SECUNIA
http://www.samba.org/samba/security/CVE-2007-2447.html
x_refsource_CONFIRM
MDKSA-2007:104
vendor-advisory
x_refsource_MANDRIVA
25256
third-party-advisory
x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1366
x_refsource_CONFIRM
25259
third-party-advisory
x_refsource_SECUNIA
SSA:2007-134-01
vendor-advisory
x_refsource_SLACKWARE
34700
vdb-entry
x_refsource_OSVDB
102964
vendor-advisory
x_refsource_SUNALERT
20070514 Samba SAMR Change Password Remote Command Injection Vulnerability
third-party-advisory
x_refsource_IDEFENSE
26909
third-party-advisory
x_refsource_SECUNIA
SSRT071424
vendor-advisory
x_refsource_HP
ADV-2008-0050
vdb-entry
x_refsource_VUPEN
27706
third-party-advisory
x_refsource_SECUNIA
DSA-1291
vendor-advisory
x_refsource_DEBIAN
1018051
vdb-entry
x_refsource_SECTRACK
http://docs.info.apple.com/article.html?artnum=306172
x_refsource_CONFIRM
2700
third-party-advisory
x_refsource_SREASON
25232
third-party-advisory
x_refsource_SECUNIA
25251
third-party-advisory
x_refsource_SECUNIA
200588
vendor-advisory
x_refsource_SUNALERT
25246
third-party-advisory
x_refsource_SECUNIA
25159
vdb-entry
x_refsource_BID
25255
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0354
vendor-advisory
x_refsource_REDHAT
26235
third-party-advisory
x_refsource_SECUNIA
25675
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2079
vdb-entry
x_refsource_VUPEN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now