CVE-2007-2444
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via
02 Description
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 0.77% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 55.3% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2007-05-14 21:00Z19 YR AGO
- Last updated
- 2024-08-07 13:42Z2 YR AGO
- Reserved
- 2007-05-02
- Assigning CNA
- redhat
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-269Improper Privilege ManagementClass
- Data version
- 5.1
- Document digest
- d35f30f76f2758ad9b5c8a73a8870ff01905492090bb506c5bf10bac8136706b
05 Affected products
06 References
- security.gentoo.orgGLSA-200705-15http://security.gentoo.org/glsa/glsa-200705-15.xml
- secunia.com25289http://secunia.com/advisories/25289
- www.vupen.comADV-2007-1805http://www.vupen.com/english/advisories/2007/1805
- secunia.com25772http://secunia.com/advisories/25772
- www.openpkg.comOpenPKG-SA-2007.012http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
- lists.suse.comSUSE-SA:2007:031http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
- secunia.com25270http://secunia.com/advisories/25270
- www.securityfocus.com20070515 FLEA-2007-0017-1: sambahttp://www.securityfocus.com/archive/1/468670/100/0/threaded
- www.vupen.comADV-2007-2281http://www.vupen.com/english/advisories/2007/2281
- www.vupen.comADV-2007-2210http://www.vupen.com/english/advisories/2007/2210
- h20000.www2.hp.comHPSBTU02218http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
- www.trustix.org2007-0017http://www.trustix.org/errata/2007/0017/
- www.securitytracker.com1018049http://www.securitytracker.com/id?1018049
- www.ubuntu.comUSN-460-1http://www.ubuntu.com/usn/usn-460-1
- securityreason.com2701http://securityreason.com/securityalert/2701
- secunia.com25241http://secunia.com/advisories/25241
- www.mandriva.comMDKSA-2007:104http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
- secunia.com25256http://secunia.com/advisories/25256
- issues.rpath.comhttps://issues.rpath.com/browse/RPL-1366
- secunia.com25259http://secunia.com/advisories/25259
- slackware.comSSA:2007-134-01http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
- sunsolve.sun.com102964http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
- www.debian.orgDSA-1291http://www.debian.org/security/2007/dsa-1291
- www.securityfocus.com20070513 [SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevationhttp://www.securityfocus.com/archive/1/468548/100/0/threaded
- secunia.com25232http://secunia.com/advisories/25232
- secunia.com25251http://secunia.com/advisories/25251
- sunsolve.sun.com200588http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
- www.ubuntu.comUSN-460-2http://www.ubuntu.com/usn/usn-460-2
- secunia.com25246http://secunia.com/advisories/25246
- osvdb.org34698http://osvdb.org/34698
- secunia.com25255http://secunia.com/advisories/25255
- www.samba.orghttp://www.samba.org/samba/security/CVE-2007-2444.html
- www.securityfocus.com23974http://www.securityfocus.com/bid/23974
- secunia.com25675http://secunia.com/advisories/25675
07 Fixed in
Debian 12
- samba Fixed in 3.0.25-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 13
- samba Fixed in 3.0.25-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
Debian 14
- samba Fixed in 3.0.25-1
Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.
A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.