CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the…

published May 14, 2007

CVSS
—
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49759 · 98.9th percentile
Published
2007-05-14T21:00Z
EPSS history
Timeline
  • 14 MAY 21:00Z
    The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the…
    cvelistv5