CVE
CVE-2007-2447
Samba · Samba
- First Reported
- Jun 7, 2026
- Latest Reported
- Jun 13, 2026
CVE Enrichment
- CVSS
- 6.0 MEDIUM
- EPSS
- 49.76%
- EPSS Percentile
- 98.90%
- CISA KEV
- Not listed
Description
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- [email protected]
- Published
- 15-May-2007 04:19
- Last Modified
- 17-Jun-2026 05:39
- EPSS Date
- 2026-10-30
CVSS Vector
AV:N /
AC:M /
Au:S /
C:P /
I:P /
A:P
Affected Products / Versions
- samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.0
cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.1
cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.2
cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.2a
cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.3
cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.4
cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.4
cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.5
cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.6
cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.7
cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.8
cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.9
cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.10
cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.11
cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.12
cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.13
cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.14
cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.14a
cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.15
cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.16
cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.17
cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.18
cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.19
cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.20
cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.20a
cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.20b
cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.21
cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.21a
cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.21b
cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.21c
cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.22
cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.23
cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.23a
cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.23b
cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.23c
cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.23d
cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.24
cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.25
cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.25
cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.25
cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.25
cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* - samba / samba
Source: NVD CPE · affected
Version / affected range: 3.0.25
cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- A Samba CVE-2007-2447 weakness led to root access on the Metasploitable host. Claude and MCP Kali Server Automate a Lab Penetration Test
- list — including a world-writable tmp share — noting Samba 3.0.20 is vulnerable to usermap_script (CVE-2007-2447). Using Claude Desktop and Metasploit for Agentic Penetration Testing
CVE (2)
MITRE ATT&CK (13)
Products (10)
Tools (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.