Search for vulnerabilities
| Vulnerability ID | VCID-t54d-kfy1-aaan |
| Aliases |
CVE-2007-2447
|
| Summary | The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management. |
| Status | Published |
| Exploitability | 2.0 |
| Weighted Severity | 9.0 |
| Risk | 10.0 |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| Data source | Exploit-DB |
|---|---|
| Date added | Aug. 18, 2010 |
| Description | Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit) |
| Ransomware campaign use | Known |
| Source publication date | Aug. 18, 2010 |
| Exploit type | remote |
| Platform | unix |
| Source update date | Sept. 6, 2017 |
| Data source | Metasploit |
|---|---|
| Description | This module exploits a command execution vulnerability in Samba versions 3.0.20 through 3.0.25rc3 when using the non-default "username map script" configuration option. By specifying a username containing shell meta characters, attackers can execute arbitrary commands. No authentication is needed to exploit this vulnerability since this option is used to map usernames prior to authentication! |
| Note | {}
|
| Ransomware campaign use | Unknown |
| Source publication date | May 14, 2007 |
| Platform | Unix |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/samba/usermap_script.rb |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.97516 |
| EPSS Score | 0.48565 |
| Published At | April 3, 2025, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||