// For flags

CVE-2007-2444

 

Severity Score

7.2
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

Error lógico en la funcionalidad de traducción SID/Name en smbd en Samba 3.0.23d hasta 3.0.25pre2 permite a usuarios locales ganar privilegios de forma temporal y ejecutar operaciones del protocolo SMB/CIFS a través de vectores no especificados que provocan que el demonio transite al usuario root.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-05-02 CVE Reserved
  • 2007-05-14 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-10-06 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-269: Improper Privilege Management
CAPEC
References (31)
URL Tag Source
http://osvdb.org/34698 Broken Link
http://secunia.com/advisories/25232 Third Party Advisory
http://secunia.com/advisories/25241 Third Party Advisory
http://secunia.com/advisories/25246 Third Party Advisory
http://secunia.com/advisories/25251 Third Party Advisory
http://secunia.com/advisories/25255 Third Party Advisory
http://secunia.com/advisories/25256 Third Party Advisory
http://secunia.com/advisories/25259 Third Party Advisory
http://secunia.com/advisories/25270 Third Party Advisory
http://secunia.com/advisories/25289 Third Party Advisory
http://secunia.com/advisories/25675 Third Party Advisory
http://secunia.com/advisories/25772 Third Party Advisory
http://securityreason.com/securityalert/2701 Third Party Advisory
http://www.securityfocus.com/archive/1/468548/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/468670/100/0/threaded Mailing List
http://www.securityfocus.com/bid/23974 Third Party Advisory
http://www.securitytracker.com/id?1018049 Third Party Advisory
https://issues.rpath.com/browse/RPL-1366 Broken Link
URL Date SRC
URL Date SRC
http://www.samba.org/samba/security/CVE-2007-2444.html 2022-08-29
URL Date SRC
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 2022-08-29
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html 2022-08-29
http://security.gentoo.org/glsa/glsa-200705-15.xml 2022-08-29
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 2022-08-29
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 2022-08-29
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 2022-08-29
http://www.debian.org/security/2007/dsa-1291 2022-08-29
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 2022-08-29
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html 2022-08-29
http://www.trustix.org/errata/2007/0017 2022-08-29
http://www.ubuntu.com/usn/usn-460-1 2022-08-29
http://www.ubuntu.com/usn/usn-460-2 2022-08-29
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.0.23d
Search vendor "Samba" for product "Samba" and version "3.0.23d"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.0.24
Search vendor "Samba" for product "Samba" and version "3.0.24"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.0.25
Search vendor "Samba" for product "Samba" and version "3.0.25"
pre2
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 4.0
Search vendor "Debian" for product "Debian Linux" and version "4.0"
-
Affected
Debian
Search vendor "Debian"
 Debian Linux
Search vendor "Debian" for product "Debian Linux"
 5.0
Search vendor "Debian" for product "Debian Linux" and version "5.0"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.06
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.06"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 6.10
Search vendor "Canonical" for product "Ubuntu Linux" and version "6.10"
-
Affected
Canonical
Search vendor "Canonical"
 Ubuntu Linux
Search vendor "Canonical" for product "Ubuntu Linux"
 7.04
Search vendor "Canonical" for product "Ubuntu Linux" and version "7.04"
-
Affected