CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
References
Link Resource
http://docs.info.apple.com/article.html?artnum=306172
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://secunia.com/advisories/25232 Vendor Advisory
http://secunia.com/advisories/25241 Vendor Advisory
http://secunia.com/advisories/25246 Vendor Advisory
http://secunia.com/advisories/25251 Vendor Advisory
http://secunia.com/advisories/25255 Vendor Advisory
http://secunia.com/advisories/25256 Vendor Advisory
http://secunia.com/advisories/25257 Vendor Advisory
http://secunia.com/advisories/25259 Vendor Advisory
http://secunia.com/advisories/25270 Vendor Advisory
http://secunia.com/advisories/25289
http://secunia.com/advisories/25567
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://secunia.com/advisories/26083
http://secunia.com/advisories/26235
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://secunia.com/advisories/28292
http://security.gentoo.org/glsa/glsa-200705-15.xml
http://securityreason.com/securityalert/2700
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://www.debian.org/security/2007/dsa-1291
http://www.kb.cert.org/vuls/id/268336 US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.novell.com/linux/security/advisories/2007_14_sr.html
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
http://www.osvdb.org/34700
http://www.redhat.com/support/errata/RHSA-2007-0354.html
http://www.samba.org/samba/security/CVE-2007-2447.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/468565/100/0/threaded
http://www.securityfocus.com/archive/1/468670/100/0/threaded
http://www.securityfocus.com/bid/23972
http://www.securityfocus.com/bid/25159
http://www.securitytracker.com/id?1018051
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-460-1
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2079
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
http://www.vupen.com/english/advisories/2007/2732
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2008/0050
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
https://issues.rpath.com/browse/RPL-1366
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062
http://docs.info.apple.com/article.html?artnum=306172
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534
http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
http://secunia.com/advisories/25232 Vendor Advisory
http://secunia.com/advisories/25241 Vendor Advisory
http://secunia.com/advisories/25246 Vendor Advisory
http://secunia.com/advisories/25251 Vendor Advisory
http://secunia.com/advisories/25255 Vendor Advisory
http://secunia.com/advisories/25256 Vendor Advisory
http://secunia.com/advisories/25257 Vendor Advisory
http://secunia.com/advisories/25259 Vendor Advisory
http://secunia.com/advisories/25270 Vendor Advisory
http://secunia.com/advisories/25289
http://secunia.com/advisories/25567
http://secunia.com/advisories/25675
http://secunia.com/advisories/25772
http://secunia.com/advisories/26083
http://secunia.com/advisories/26235
http://secunia.com/advisories/26909
http://secunia.com/advisories/27706
http://secunia.com/advisories/28292
http://security.gentoo.org/glsa/glsa-200705-15.xml
http://securityreason.com/securityalert/2700
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
http://www.debian.org/security/2007/dsa-1291
http://www.kb.cert.org/vuls/id/268336 US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
http://www.novell.com/linux/security/advisories/2007_14_sr.html
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
http://www.osvdb.org/34700
http://www.redhat.com/support/errata/RHSA-2007-0354.html
http://www.samba.org/samba/security/CVE-2007-2447.html Patch Vendor Advisory
http://www.securityfocus.com/archive/1/468565/100/0/threaded
http://www.securityfocus.com/archive/1/468670/100/0/threaded
http://www.securityfocus.com/bid/23972
http://www.securityfocus.com/bid/25159
http://www.securitytracker.com/id?1018051
http://www.trustix.org/errata/2007/0017/
http://www.ubuntu.com/usn/usn-460-1
http://www.vupen.com/english/advisories/2007/1805
http://www.vupen.com/english/advisories/2007/2079
http://www.vupen.com/english/advisories/2007/2210
http://www.vupen.com/english/advisories/2007/2281
http://www.vupen.com/english/advisories/2007/2732
http://www.vupen.com/english/advisories/2007/3229
http://www.vupen.com/english/advisories/2008/0050
http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
https://issues.rpath.com/browse/RPL-1366
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:*
cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*

History

21 Nov 2024, 00:30

Type Values Removed Values Added
References () http://docs.info.apple.com/article.html?artnum=306172 - () http://docs.info.apple.com/article.html?artnum=306172 -
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 - () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768 -
References () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 - () http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 -
References () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 - () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534 -
References () http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - () http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html -
References () http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - () http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html -
References () http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html - () http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html -
References () http://secunia.com/advisories/25232 - Vendor Advisory () http://secunia.com/advisories/25232 - Vendor Advisory
References () http://secunia.com/advisories/25241 - Vendor Advisory () http://secunia.com/advisories/25241 - Vendor Advisory
References () http://secunia.com/advisories/25246 - Vendor Advisory () http://secunia.com/advisories/25246 - Vendor Advisory
References () http://secunia.com/advisories/25251 - Vendor Advisory () http://secunia.com/advisories/25251 - Vendor Advisory
References () http://secunia.com/advisories/25255 - Vendor Advisory () http://secunia.com/advisories/25255 - Vendor Advisory
References () http://secunia.com/advisories/25256 - Vendor Advisory () http://secunia.com/advisories/25256 - Vendor Advisory
References () http://secunia.com/advisories/25257 - Vendor Advisory () http://secunia.com/advisories/25257 - Vendor Advisory
References () http://secunia.com/advisories/25259 - Vendor Advisory () http://secunia.com/advisories/25259 - Vendor Advisory
References () http://secunia.com/advisories/25270 - Vendor Advisory () http://secunia.com/advisories/25270 - Vendor Advisory
References () http://secunia.com/advisories/25289 - () http://secunia.com/advisories/25289 -
References () http://secunia.com/advisories/25567 - () http://secunia.com/advisories/25567 -
References () http://secunia.com/advisories/25675 - () http://secunia.com/advisories/25675 -
References () http://secunia.com/advisories/25772 - () http://secunia.com/advisories/25772 -
References () http://secunia.com/advisories/26083 - () http://secunia.com/advisories/26083 -
References () http://secunia.com/advisories/26235 - () http://secunia.com/advisories/26235 -
References () http://secunia.com/advisories/26909 - () http://secunia.com/advisories/26909 -
References () http://secunia.com/advisories/27706 - () http://secunia.com/advisories/27706 -
References () http://secunia.com/advisories/28292 - () http://secunia.com/advisories/28292 -
References () http://security.gentoo.org/glsa/glsa-200705-15.xml - () http://security.gentoo.org/glsa/glsa-200705-15.xml -
References () http://securityreason.com/securityalert/2700 - () http://securityreason.com/securityalert/2700 -
References () http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 - () http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1 -
References () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 - () http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1 -
References () http://www.debian.org/security/2007/dsa-1291 - () http://www.debian.org/security/2007/dsa-1291 -
References () http://www.kb.cert.org/vuls/id/268336 - US Government Resource () http://www.kb.cert.org/vuls/id/268336 - US Government Resource
References () http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 - () http://www.mandriva.com/security/advisories?name=MDKSA-2007:104 -
References () http://www.novell.com/linux/security/advisories/2007_14_sr.html - () http://www.novell.com/linux/security/advisories/2007_14_sr.html -
References () http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html - () http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html -
References () http://www.osvdb.org/34700 - () http://www.osvdb.org/34700 -
References () http://www.redhat.com/support/errata/RHSA-2007-0354.html - () http://www.redhat.com/support/errata/RHSA-2007-0354.html -
References () http://www.samba.org/samba/security/CVE-2007-2447.html - Patch, Vendor Advisory () http://www.samba.org/samba/security/CVE-2007-2447.html - Patch, Vendor Advisory
References () http://www.securityfocus.com/archive/1/468565/100/0/threaded - () http://www.securityfocus.com/archive/1/468565/100/0/threaded -
References () http://www.securityfocus.com/archive/1/468670/100/0/threaded - () http://www.securityfocus.com/archive/1/468670/100/0/threaded -
References () http://www.securityfocus.com/bid/23972 - () http://www.securityfocus.com/bid/23972 -
References () http://www.securityfocus.com/bid/25159 - () http://www.securityfocus.com/bid/25159 -
References () http://www.securitytracker.com/id?1018051 - () http://www.securitytracker.com/id?1018051 -
References () http://www.trustix.org/errata/2007/0017/ - () http://www.trustix.org/errata/2007/0017/ -
References () http://www.ubuntu.com/usn/usn-460-1 - () http://www.ubuntu.com/usn/usn-460-1 -
References () http://www.vupen.com/english/advisories/2007/1805 - () http://www.vupen.com/english/advisories/2007/1805 -
References () http://www.vupen.com/english/advisories/2007/2079 - () http://www.vupen.com/english/advisories/2007/2079 -
References () http://www.vupen.com/english/advisories/2007/2210 - () http://www.vupen.com/english/advisories/2007/2210 -
References () http://www.vupen.com/english/advisories/2007/2281 - () http://www.vupen.com/english/advisories/2007/2281 -
References () http://www.vupen.com/english/advisories/2007/2732 - () http://www.vupen.com/english/advisories/2007/2732 -
References () http://www.vupen.com/english/advisories/2007/3229 - () http://www.vupen.com/english/advisories/2007/3229 -
References () http://www.vupen.com/english/advisories/2008/0050 - () http://www.vupen.com/english/advisories/2008/0050 -
References () http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf - () http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf -
References () https://issues.rpath.com/browse/RPL-1366 - () https://issues.rpath.com/browse/RPL-1366 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062 -

Information

Published : 2007-05-14 21:19

Updated : 2024-11-21 00:30


NVD link : CVE-2007-2447

Mitre link : CVE-2007-2447

CVE.ORG link : CVE-2007-2447


JSON object : View

Products Affected

samba

  • samba