CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

• http://docs.info.apple.com/article.html?artnum=306172
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
• http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
• http://secunia.com/advisories/25232Vendor Advisory
• http://secunia.com/advisories/25241Vendor Advisory
• http://secunia.com/advisories/25246Vendor Advisory
• http://secunia.com/advisories/25251Vendor Advisory
• http://secunia.com/advisories/25255Vendor Advisory
• http://secunia.com/advisories/25256Vendor Advisory
• http://secunia.com/advisories/25257Vendor Advisory
• http://secunia.com/advisories/25259Vendor Advisory
• http://secunia.com/advisories/25270Vendor Advisory
• http://secunia.com/advisories/25289
• http://secunia.com/advisories/25567
• http://secunia.com/advisories/25675
• http://secunia.com/advisories/25772
• http://secunia.com/advisories/26083
• http://secunia.com/advisories/26235
• http://secunia.com/advisories/26909
• http://secunia.com/advisories/27706
• http://secunia.com/advisories/28292
• http://security.gentoo.org/glsa/glsa-200705-15.xml
• http://securityreason.com/securityalert/2700
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
• http://www.debian.org/security/2007/dsa-1291
• http://www.kb.cert.org/vuls/id/268336US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
• http://www.novell.com/linux/security/advisories/2007_14_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
• http://www.osvdb.org/34700
• http://www.redhat.com/support/errata/RHSA-2007-0354.html
• http://www.samba.org/samba/security/CVE-2007-2447.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/468565/100/0/threaded
• http://www.securityfocus.com/archive/1/468670/100/0/threaded
• http://www.securityfocus.com/bid/23972
• http://www.securityfocus.com/bid/25159
• http://www.securitytracker.com/id?1018051
• http://www.trustix.org/errata/2007/0017/
• http://www.ubuntu.com/usn/usn-460-1
• http://www.vupen.com/english/advisories/2007/1805
• http://www.vupen.com/english/advisories/2007/2079
• http://www.vupen.com/english/advisories/2007/2210
• http://www.vupen.com/english/advisories/2007/2281
• http://www.vupen.com/english/advisories/2007/2732
• http://www.vupen.com/english/advisories/2007/3229
• http://www.vupen.com/english/advisories/2008/0050
• http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
• https://issues.rpath.com/browse/RPL-1366
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062
• http://docs.info.apple.com/article.html?artnum=306172
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01067768
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=534
• http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
• http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
• http://secunia.com/advisories/25232Vendor Advisory
• http://secunia.com/advisories/25241Vendor Advisory
• http://secunia.com/advisories/25246Vendor Advisory
• http://secunia.com/advisories/25251Vendor Advisory
• http://secunia.com/advisories/25255Vendor Advisory
• http://secunia.com/advisories/25256Vendor Advisory
• http://secunia.com/advisories/25257Vendor Advisory
• http://secunia.com/advisories/25259Vendor Advisory
• http://secunia.com/advisories/25270Vendor Advisory
• http://secunia.com/advisories/25289
• http://secunia.com/advisories/25567
• http://secunia.com/advisories/25675
• http://secunia.com/advisories/25772
• http://secunia.com/advisories/26083
• http://secunia.com/advisories/26235
• http://secunia.com/advisories/26909
• http://secunia.com/advisories/27706
• http://secunia.com/advisories/28292
• http://security.gentoo.org/glsa/glsa-200705-15.xml
• http://securityreason.com/securityalert/2700
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
• http://www.debian.org/security/2007/dsa-1291
• http://www.kb.cert.org/vuls/id/268336US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
• http://www.novell.com/linux/security/advisories/2007_14_sr.html
• http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
• http://www.openwall.com/lists/oss-security/2025/10/16/2
• http://www.osvdb.org/34700
• http://www.redhat.com/support/errata/RHSA-2007-0354.html
• http://www.samba.org/samba/security/CVE-2007-2447.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/archive/1/468565/100/0/threaded
• http://www.securityfocus.com/archive/1/468670/100/0/threaded
• http://www.securityfocus.com/bid/23972
• http://www.securityfocus.com/bid/25159
• http://www.securitytracker.com/id?1018051
• http://www.trustix.org/errata/2007/0017/
• http://www.ubuntu.com/usn/usn-460-1
• http://www.vupen.com/english/advisories/2007/1805
• http://www.vupen.com/english/advisories/2007/2079
• http://www.vupen.com/english/advisories/2007/2210
• http://www.vupen.com/english/advisories/2007/2281
• http://www.vupen.com/english/advisories/2007/2732
• http://www.vupen.com/english/advisories/2007/3229
• http://www.vupen.com/english/advisories/2008/0050
• http://www.xerox.com/downloads/usa/en/c/cert_XRX08_001.pdf
• https://issues.rpath.com/browse/RPL-1366
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10062

Published

May 14, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2441Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and e…
• CVE-2007-2442The gssrpc__svcauth_gssapi function in the RPC library in MI…
• CVE-2007-2443Integer signedness error in the gssrpc__svcauth_unix functio…
• CVE-2007-2444Logic error in the SID/Name translation functionality in smb…
• CVE-2007-2445The png_handle_tRNS function in pngrutil.c in libpng before …
• CVE-2007-2446Multiple heap-based buffer overflows in the NDR parsing in s…
• CVE-2007-2448Subversion 1.4.3 and earlier does not properly implement the…
• CVE-2007-2449Multiple cross-site scripting (XSS) vulnerabilities in certa…
• CVE-2007-2450Multiple cross-site scripting (XSS) vulnerabilities in the (…
• CVE-2007-2451Unspecified vulnerability in drivers/crypto/geode-aes.c in G…
• CVE-2007-2452Heap-based buffer overflow in the visit_old_format function …
• CVE-2007-2453The random number feature in Linux kernel 2.6 before 2.6.20.…