The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Samba | — | Apply OS X security update 2007-007 | Dec 16, 2011 | May 14, 2007 |
| Debian | — | Upgrade samba | Jul 30, 2024 | May 14, 2007 |
| Freebsd | — | Upgrade sambaUpgrade ja-samba | Dec 10, 2025 | May 16, 2007 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Oct 30, 2017 | May 14, 2007 |
| Oracle_linux | — | Upgrade samba-swatUpgrade sambaUpgrade samba-commonUpgrade samba-client | Oct 16, 2024 | May 14, 2007 |
| Suse | — | Upgrade ldapsmbUpgrade samba-32bitUpgrade cifs-utilsUpgrade libwbclient0Upgrade libnetapi-develUpgrade libtalloc2Upgrade samba-libs-python3Upgrade libldb-develUpgrade samba-develUpgrade ctdbUpgrade libldb2Upgrade libtalloc-develUpgrade samba-krb-printingUpgrade libtalloc2-x86Upgrade samba-x86Upgrade libsmbsharemodes0Upgrade samba-winbindUpgrade samba-winbind-32bitUpgrade samba-libsUpgrade ctdb-pcp-pmdaUpgrade libsmbclient0-32bitUpgrade samba-dcerpcUpgrade libsmbclient-develUpgrade libnetapi0Upgrade samba-client-x86Upgrade sambaUpgrade samba-docUpgrade samba-ad-dc-libsUpgrade libtdb-develUpgrade libsmbclient0Upgrade libtevent0Upgrade libtalloc1-32bitUpgrade libtdb1-32bitUpgrade libwbclient0-x86Upgrade libtevent0-32bitUpgrade samba-client-32bitUpgrade samba-winbind-x86Upgrade samba-winbind-libs-langUpgrade libtevent-develUpgrade libsmbsharemodes-develUpgrade samba-client-langUpgrade samba-python3Upgrade libsmbclient0-x86Upgrade libldb1Upgrade samba-client-libsUpgrade libtevent0-x86Upgrade samba-ldb-ldapUpgrade samba-clientUpgrade python3-ldbUpgrade samba-testUpgrade samba-winbind-libsUpgrade samba-dsdb-modulesUpgrade samba-toolUpgrade ldb-toolsUpgrade wb-cifs-idmap-pluginUpgrade libtdb1Upgrade pam_cifscredsUpgrade samba-gpupdateUpgrade libwbclient-develUpgrade libtalloc1Upgrade cifs-utils-develUpgrade libtdb1-x86Upgrade samba-ad-dcUpgrade libtalloc2-32bitUpgrade libwbclient0-32bitUpgrade libtalloc1-x86Upgrade cifs-mount | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade samba | Nov 8, 2024 | May 14, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub