CVE-2007-2447

CVE-2007-2447 Samba 익스플로잇 Samba smbd 3.0.20-Debian을 대상으로 하는 CVE-2007-2447 익스플로잇의 독립 실행형 Rust 구현체입니다. 취약점 설명 CVE-2007-2447은 Samba 3.0.0부터 3.0.25rc3까지의 버전에 존재하는 명령 삽입command injection 취약점입니다. 이 취약점은 SamrChangePassword 함수에서 발생하며, 사용자 입력을 제대로 검증하지 못해 공격자가 SMB 인증 중 사용자 이름 필드의 셸 메타문자를 통해 임의의 명령을 실행할 수 ...

SUSE CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute...

Code injection

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute...

CVE-2007-2447

The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the 1 SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute...

samba -- multiple vulnerabilities

The Samba Team reports: A bug in the local SID/Name translation routines may potentially result in a user being able to issue SMB/CIFS protocol operations as root. When translating SIDs to/from names using Samba local list of user and group accounts, a logic error in the smbd daemon's internal...