NVD

Id
54614  
Name
CVE-2007-2447  
Description
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-05-14  
Modified Date
2011-03-07  
Seq
2007-2447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277136 54614 CVE-2007-2447 http://docs.info.apple.com/article.html?artnum=306172  View
277137 54614 CVE-2007-2447 SSRT071424  View
277138 54614 CVE-2007-2447 HPSBTU02218  View
277139 54614 CVE-2007-2447 20070514 Samba SAMR Change Password Remote Command Injection Vulnerability  View
277140 54614 CVE-2007-2447 APPLE-SA-2007-07-31  View
277141 54614 CVE-2007-2447 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player  View
277142 54614 CVE-2007-2447 SUSE-SA:2007:031  View
277143 54614 CVE-2007-2447 oval:org.mitre.oval:def:10062  View
277144 54614 CVE-2007-2447 GLSA-200705-15  View
277145 54614 CVE-2007-2447 2700  View
277146 54614 CVE-2007-2447 SSA:2007-134-01  View
277147 54614 CVE-2007-2447 102964  View
277148 54614 CVE-2007-2447 200588  View
277149 54614 CVE-2007-2447 DSA-1291  View
277150 54614 CVE-2007-2447 VU#268336  View
277151 54614 CVE-2007-2447 MDKSA-2007:104  View
277152 54614 CVE-2007-2447 SUSE-SR:2007:014  View
277153 54614 CVE-2007-2447 OpenPKG-SA-2007.012  View
277154 54614 CVE-2007-2447 RHSA-2007:0354  View
277155 54614 CVE-2007-2447 http://www.samba.org/samba/security/CVE-2007-2447.html  View
277156 54614 CVE-2007-2447 20070513 [SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability  View
277157 54614 CVE-2007-2447 20070515 FLEA-2007-0017-1: samba  View
277158 54614 CVE-2007-2447 23972  View
277159 54614 CVE-2007-2447 25159  View
277160 54614 CVE-2007-2447 1018051  View
277161 54614 CVE-2007-2447 2007-0017  View
277162 54614 CVE-2007-2447 USN-460-1  View
277163 54614 CVE-2007-2447 ADV-2007-1805  View
277164 54614 CVE-2007-2447 ADV-2007-2079  View
277165 54614 CVE-2007-2447 ADV-2007-2210  View
277166 54614 CVE-2007-2447 ADV-2007-2281  View
277167 54614 CVE-2007-2447 ADV-2007-2732  View
277168 54614 CVE-2007-2447 ADV-2007-3229  View
277169 54614 CVE-2007-2447 ADV-2008-0050  View
277170 54614 CVE-2007-2447 http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf  View
277171 54614 CVE-2007-2447 https://issues.rpath.com/browse/RPL-1366  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51711 JVNDB-2007-000374 Samba におけるコマンドインジェクションの脆弱性 Samba にはユーザからの RPC メッセージの入力を適切に処理せず /bin/sh に渡す問題があります。結果として、遠隔の第三者により任意のコマンドを実行される可能性があります。 CVE-2007-2447 25802 CVE-2007-2447 54614 6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000374.html 2007-05-14 2007-07-30 View