CVE-2007-2444
CVE-2007-2444
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.
EPSS 0.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://security.gentoo.org/glsa/glsa-200705-15.xml
- http://secunia.com/advisories/25289
- http://www.vupen.com/english/advisories/2007/1805
- http://secunia.com/advisories/25772
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.012.html
- http://lists.suse.com/archive/suse-security-announce/2007-May/0006.html
- http://secunia.com/advisories/25270
- http://www.securityfocus.com/archive/1/468670/100/0/threaded
- http://www.vupen.com/english/advisories/2007/2281
- http://www.vupen.com/english/advisories/2007/2210
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980
- http://www.trustix.org/errata/2007/0017/
- http://www.securitytracker.com/id?1018049
- http://www.ubuntu.com/usn/usn-460-1
- http://securityreason.com/securityalert/2701
- http://secunia.com/advisories/25241
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:104
- http://secunia.com/advisories/25256
- https://issues.rpath.com/browse/RPL-1366
- http://secunia.com/advisories/25259
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102964-1
- http://www.debian.org/security/2007/dsa-1291
- https://nvd.nist.gov/vuln/detail/CVE-2007-2444