Lucene search

K
cve[email protected]CVE-2007-2444
HistoryMay 14, 2007 - 9:19 p.m.

CVE-2007-2444

2007-05-1421:19:00
CWE-269
web.nvd.nist.gov
43
2
cve-2007-2444
samba
vulnerability
smb
cifs
privilege escalation
nvd

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.529 Medium

EPSS

Percentile

97.6%

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

References

Social References

More

6.5 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.529 Medium

EPSS

Percentile

97.6%