The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade sambaUpgrade ja-samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-swatUpgrade samba-clientUpgrade sambaUpgrade samba-common | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade samba-winbindUpgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade samba-develUpgrade sambaUpgrade libtalloc2-x86Upgrade ctdbUpgrade samba-client-x86Upgrade libnetapi-develUpgrade samba-winbind-32bitUpgrade libsmbclient0-32bitUpgrade libsmbsharemodes0Upgrade cifs-utilsUpgrade libnetapi0Upgrade libtevent0Upgrade libsmbclient-develUpgrade libtdb-develUpgrade samba-krb-printingUpgrade samba-ad-dc-libsUpgrade libwbclient0Upgrade samba-libs-python3Upgrade samba-libsUpgrade libtalloc-develUpgrade libldb2Upgrade samba-dcerpcUpgrade libldb-develUpgrade samba-x86Upgrade ldapsmbUpgrade libsmbclient0Upgrade libtalloc2Upgrade samba-32bitUpgrade samba-testUpgrade samba-dsdb-modulesUpgrade libsmbsharemodes-develUpgrade cifs-utils-develUpgrade samba-gpupdateUpgrade libtdb1Upgrade cifs-mountUpgrade libtevent0-x86Upgrade libwbclient0-32bitUpgrade libtdb1-32bitUpgrade samba-ldb-ldapUpgrade samba-clientUpgrade libtdb1-x86Upgrade libtevent0-32bitUpgrade samba-client-libsUpgrade wb-cifs-idmap-pluginUpgrade samba-ad-dcUpgrade libtalloc2-32bitUpgrade libtalloc1-x86Upgrade libtalloc1Upgrade libsmbclient0-x86Upgrade ldb-toolsUpgrade pam_cifscredsUpgrade samba-python3Upgrade samba-winbind-libsUpgrade libwbclient-develUpgrade samba-client-langUpgrade libtevent-develUpgrade libldb1Upgrade python3-ldbUpgrade samba-winbind-libs-langUpgrade samba-winbind-x86Upgrade libtalloc1-32bitUpgrade samba-toolUpgrade libwbclient0-x86Upgrade samba-client-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub