MEDIUM
samba code injection
Published May 14, 2007
6.0
MEDIUMCVSS 2.0
EPSS 49.76%
Description
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
Affected products
No data.
OR
- 3.0.0
- 3.0.1
- 3.0.2
- 3.0.2a
- 3.0.3
- 3.0.4
- 3.0.4
- 3.0.5
- 3.0.6
- 3.0.7
- 3.0.8
- 3.0.9
- 3.0.10
- 3.0.11
- 3.0.12
- 3.0.13
- 3.0.14
- 3.0.14a
- 3.0.15
- 3.0.16
- 3.0.17
- 3.0.18
- 3.0.19
- 3.0.20
- 3.0.20a
- 3.0.20b
- 3.0.21
- 3.0.21a
- 3.0.21b
- 3.0.21c
- 3.0.22
- 3.0.23
- 3.0.23a
- 3.0.23b
- 3.0.23c
- 3.0.23d
- 3.0.24
- 3.0.25
- 3.0.25
- 3.0.25
- 3.0.25
- 3.0.25
No data.
Red Hat Enterprise Linux 2.1
samba-0:2.2.12-1.21as.6
Fixed · RHSA-2007:0354
Red Hat Enterprise Linux 3
samba-0:3.0.9-1.3E.13.2
Fixed · RHSA-2007:0354
Red Hat Enterprise Linux 4
samba-0:3.0.10-1.4E.12.2
Fixed · RHSA-2007:0354
Red Hat Enterprise Linux 5
samba-0:3.0.23c-2.el5.2.0.2
Fixed · RHSA-2007:0354
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 2.1 | samba-0:2.2.12-1.21as.6 | Fixed | RHSA-2007:0354 |
| Red Hat Enterprise Linux 3 | samba-0:3.0.9-1.3E.13.2 | Fixed | RHSA-2007:0354 |
| Red Hat Enterprise Linux 4 | samba-0:3.0.10-1.4E.12.2 | Fixed | RHSA-2007:0354 |
| Red Hat Enterprise Linux 5 | samba-0:3.0.23c-2.el5.2.0.2 | Fixed | RHSA-2007:0354 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
6.0 MEDIUM NVD
AV:N/AC:M/Au:S/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication Single
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
49.76% 0.49759
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.49759
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (62 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 49.76% (0.49759) | 98.86th | v5 (v2026.06.15) |
| Jun 15, 2026 | 49.76% (0.49759) | 98.75th | v5 (v2026.06.15) |
| Jun 8, 2026 | 43.15% (0.43147) | 97.57th | v4 (v2025.03.14) |
| May 22, 2026 | 49.58% (0.49575) | 97.84th | v4 (v2025.03.14) |
| Mar 20, 2026 | 78.24% (0.78237) | 99.01th | v4 (v2025.03.14) |
| Mar 8, 2026 | 50.96% (0.50957) | 97.81th | v4 (v2025.03.14) |
| Mar 7, 2026 | 54.72% (0.54718) | 97.99th | v4 (v2025.03.14) |
| Feb 18, 2026 | 57.57% (0.57571) | 98.11th | v4 (v2025.03.14) |
| Feb 17, 2026 | 78.11% (0.78107) | 98.98th | v4 (v2025.03.14) |
| Feb 9, 2026 | 59.30% (0.59296) | 98.18th | v4 (v2025.03.14) |
| Jan 23, 2026 | 57.57% (0.57571) | 98.08th | v4 (v2025.03.14) |
| Jan 18, 2026 | 54.48% (0.54476) | 97.94th | v4 (v2025.03.14) |
| Jan 2, 2026 | 76.34% (0.76340) | 98.90th | v4 (v2025.03.14) |
| Dec 10, 2025 | 75.14% (0.75145) | 98.82th | v4 (v2025.03.14) |
| Dec 4, 2025 | 76.41% (0.76411) | 98.88th | v4 (v2025.03.14) |
| Nov 30, 2025 | 54.07% (0.54073) | 97.88th | v4 (v2025.03.14) |
| Nov 8, 2025 | 58.91% (0.58915) | 98.11th | v4 (v2025.03.14) |
| Nov 7, 2025 | 64.22% (0.64220) | 98.35th | v4 (v2025.03.14) |
| Oct 31, 2025 | 60.90% (0.60899) | 98.20th | v4 (v2025.03.14) |
| Oct 22, 2025 | 63.22% (0.63224) | 98.29th | v4 (v2025.03.14) |
| Oct 21, 2025 | 67.41% (0.67406) | 98.49th | v4 (v2025.03.14) |
| Oct 17, 2025 | 66.30% (0.66299) | 98.44th | v4 (v2025.03.14) |
| Oct 4, 2025 | 60.90% (0.60899) | 98.24th | v4 (v2025.03.14) |
| Sep 21, 2025 | 83.82% (0.83817) | 99.26th | v4 (v2025.03.14) |
| Sep 16, 2025 | 80.64% (0.80644) | 99.11th | v4 (v2025.03.14) |
| Sep 4, 2025 | 77.78% (0.77776) | 98.97th | v4 (v2025.03.14) |
| Aug 21, 2025 | 59.68% (0.59676) | 98.17th | v4 (v2025.03.14) |
| Aug 13, 2025 | 49.28% (0.49284) | 97.70th | v4 (v2025.03.14) |
| Aug 6, 2025 | 52.27% (0.52267) | 97.81th | v4 (v2025.03.14) |
| Aug 4, 2025 | 49.28% (0.49284) | 97.69th | v4 (v2025.03.14) |
| Aug 1, 2025 | 56.75% (0.56754) | 98.03th | v4 (v2025.03.14) |
| Jul 29, 2025 | 82.13% (0.82125) | 99.15th | v4 (v2025.03.14) |
| Jul 26, 2025 | 62.54% (0.62538) | 98.27th | v4 (v2025.03.14) |
| Jul 19, 2025 | 52.49% (0.52486) | 97.80th | v4 (v2025.03.14) |
| Jul 10, 2025 | 49.28% (0.49284) | 97.66th | v4 (v2025.03.14) |
| Jun 11, 2025 | 74.17% (0.74168) | 98.76th | v4 (v2025.03.14) |
| Jun 8, 2025 | 72.12% (0.72121) | 98.65th | v4 (v2025.03.14) |
| Jun 6, 2025 | 73.62% (0.73620) | 98.72th | v4 (v2025.03.14) |
| May 28, 2025 | 78.94% (0.78945) | 98.99th | v4 (v2025.03.14) |
| May 4, 2025 | 72.72% (0.72722) | 98.68th | v4 (v2025.03.14) |
| May 2, 2025 | 74.64% (0.74640) | 98.78th | v4 (v2025.03.14) |
| Mar 31, 2025 | 48.57% (0.48565) | 97.51th | v4 (v2025.03.14) |
| Mar 28, 2025 | 77.37% (0.77373) | 98.92th | v4 (v2025.03.14) |
| Mar 20, 2025 | 74.48% (0.74480) | 98.81th | v4 (v2025.03.14) |
| Mar 17, 2025 | 76.12% (0.76122) | 98.86th | v4 (v2025.03.14) |
| Dec 17, 2024 | 93.79% (0.93793) | 99.34th | v3 (v2023.03.01) |
| Nov 23, 2024 | 78.60% (0.78603) | 98.36th | v3 (v2023.03.01) |
| Oct 6, 2024 | 69.84% (0.69845) | 98.07th | v3 (v2023.03.01) |
| Jul 9, 2024 | 75.31% (0.75307) | 98.17th | v3 (v2023.03.01) |
| Mar 17, 2024 | 75.07% (0.75074) | 98.06th | v3 (v2023.03.01) |
| Feb 8, 2024 | 69.29% (0.69292) | 97.87th | v3 (v2023.03.01) |
| Jan 1, 2024 | 66.11% (0.66110) | 97.62th | v3 (v2023.03.01) |
| Nov 24, 2023 | 61.27% (0.61269) | 97.49th | v3 (v2023.03.01) |
| Oct 16, 2023 | 57.10% (0.57102) | 97.31th | v3 (v2023.03.01) |
| Sep 8, 2023 | 49.64% (0.49643) | 97.07th | v3 (v2023.03.01) |
| Jul 15, 2023 | 47.91% (0.47910) | 96.97th | v3 (v2023.03.01) |
| May 20, 2023 | 47.29% (0.47286) | 96.90th | v3 (v2023.03.01) |
| May 8, 2023 | 53.95% (0.53952) | 97.08th | v3 (v2023.03.01) |
| Mar 10, 2023 | 54.56% (0.54559) | 97.04th | v3 (v2023.03.01) |
| Mar 7, 2023 | 46.87% (0.46866) | 96.83th | v3 (v2023.03.01) |
| Mar 6, 2023 | 79.40% (0.79403) | 99.48th | v2 (v2022.01.01) |
| Feb 4, 2022 | 79.40% (0.79403) | 99.37th | v2 (v2022.01.01) |
Weaknesses (0)
No CWE recorded.
References (60)
- http://docs.info.apple.com/article.html?artnum=306172 x_refsource_CONFIRM
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 vendor-advisoryx_refsource_HP
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 vendor-advisoryx_refsource_HP
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 third-party-advisoryx_refsource_IDEFENSE
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html vendor-advisoryx_refsource_APPLE
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html mailing-listx_refsource_FULLDISC
- http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/25232 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25241 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25246 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25251 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25255 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25256 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25257 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25259 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25270 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/25289 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25567 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25675 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25772 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/26083 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/26235 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/26909 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/27706 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/28292 third-party-advisoryx_refsource_SECUNIA
- http://security.gentoo.org/glsa/glsa-200705-15.xml vendor-advisoryx_refsource_GENTOO
- http://securityreason.com/securityalert/2700 third-party-advisoryx_refsource_SREASON
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 vendor-advisoryx_refsource_SLACKWARE
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 vendor-advisoryx_refsource_SUNALERT
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 vendor-advisoryx_refsource_SUNALERT
- http://www.debian.org/security/2007/dsa-1291 vendor-advisoryx_refsource_DEBIAN
- http://www.kb.cert.org/vuls/id/268336 third-party-advisoryx_refsource_CERT-VNUS Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/linux/security/advisories/2007_14_sr.html vendor-advisoryx_refsource_SUSE
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html vendor-advisoryx_refsource_OPENPKG
- http://www.openwall.com/lists/oss-security/2025/10/16/2
- http://www.osvdb.org/34700 vdb-entryx_refsource_OSVDB
- http://www.redhat.com/support/errata/RHSA-2007-0354.html vendor-advisoryx_refsource_REDHAT
- http://www.samba.org/samba/security/CVE-2007-2447.html x_refsource_CONFIRMPatchVendor Advisory
- http://www.securityfocus.com/archive/1/468565/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/468670/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/23972 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/25159 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1018051 vdb-entryx_refsource_SECTRACK
- http://www.trustix.org/errata/2007/0017/ vendor-advisoryx_refsource_TRUSTIX
- http://www.ubuntu.com/usn/usn-460-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2007/1805 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2079 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2210 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2281 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/2732 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2007/3229 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2008/0050 vdb-entryx_refsource_VUPEN
- http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf x_refsource_CONFIRM
- https://access.redhat.com/security/cve/CVE-2007-2447 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=239774 Issue Tracking
- https://issues.rpath.com/browse/RPL-1366 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2007-2447
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2007-2447
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published May 14, 2007
Updated Nov 4, 2025
Reserved May 2, 2007
Link CVE-2007-2447
CISA Vulnrichment
Updated n/a