Search for vulnerabilities
Vulnerability details: VCID-kt3s-tgsw-aaac
Vulnerability ID VCID-kt3s-tgsw-aaac
Aliases CVE-2007-2444
Summary Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
Status Published
Exploitability 0.5
Weighted Severity 6.5
Risk 3.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-269 Improper Privilege Management
System Score Found at
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.08832 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.10587 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.13796 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.24884 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.24884 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.24884 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
epss 0.24884 https://api.first.org/data/v1/epss?cve=CVE-2007-2444
cvssv2 7.2 https://nvd.nist.gov/vuln/detail/CVE-2007-2444
Reference id Reference type URL
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://osvdb.org/34698
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-2444.json
https://api.first.org/data/v1/epss?cve=CVE-2007-2444
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2444
http://secunia.com/advisories/25232
http://secunia.com/advisories/25241
http://secunia.com/advisories/25246
http://secunia.com/advisories/25251
http://secunia.com/advisories/25255
http://secunia.com/advisories/25256
http://secunia.com/advisories/25259
http://secunia.com/advisories/25270
http://secunia.com/advisories/25289
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://security.gentoo.org/glsa/glsa-200705-15.xml
http://securityreason.com/securityalert/2701
https://issues.rpath.com/browse/RPL-1366
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://www.debian.org/security/2007/dsa-1291
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
http://www.samba.org/samba/security/CVE-2007-2444.html
http://www.securityfocus.com/archive/1/468548/100/0/threaded
http://www.securityfocus.com/archive/1/468670/100/0/threaded
http://www.securityfocus.com/bid/23974
http://www.securitytracker.com/id?1018049
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-460-1
http://www.ubuntu.com/usn/usn-460-2
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
CVE-2007-2444 https://nvd.nist.gov/vuln/detail/CVE-2007-2444
GLSA-200705-15 https://security.gentoo.org/glsa/200705-15
USN-460-1 https://usn.ubuntu.com/460-1/
No exploits are available.
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-2444
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.91727
EPSS Score 0.08832
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.