VULNERABILITY INTELLIGENCE

CVE-2007-2444

CVSS score7.2 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2007-05-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references