CVE-2007-2444

Опубликовано: 14 мая 2007

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

Ссылки

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
Broken Link
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
Broken Link
http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
Mailing List
Third Party Advisory
http://osvdb.org/34698
Broken Link
http://secunia.com/advisories/25232
Third Party Advisory
http://secunia.com/advisories/25241
Third Party Advisory
http://secunia.com/advisories/25246
Third Party Advisory
http://secunia.com/advisories/25251
Third Party Advisory
http://secunia.com/advisories/25255
Third Party Advisory
http://secunia.com/advisories/25256
Third Party Advisory
http://secunia.com/advisories/25259
Third Party Advisory
http://secunia.com/advisories/25270
Third Party Advisory
http://secunia.com/advisories/25289
Third Party Advisory
http://secunia.com/advisories/25675
Third Party Advisory
http://secunia.com/advisories/25772
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200705-15.xml
Third Party Advisory
http://securityreason.com/securityalert/2701
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
Mailing List
Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
Broken Link
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200588-1
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:*

cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:*

cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08832

Низкий

7.2 High

CVSS2

Дефекты

CWE-269

Связанные уязвимости

CVE-2007-2444

ubuntu

около 18 лет назад

CVE-2007-2444

debian

около 18 лет назад

Logic error in the SID/Name translation functionality in smbd in Samba ...

GHSA-h25h-f75q-43qp

github

около 3 лет назад

BDU:2015-09575

fstec

около 18 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 92%

0.08832

Низкий

7.2 High

CVSS2

Дефекты

CWE-269