Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary priv…

Exploit prediction (EPSS)

0.78% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-269 Improper Privilege Management

References

• security.gentoo.org /glsa/glsa-200705-15.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• secunia.com /advisories/25289 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2007/1805 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/25772 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• openpkg.com /security/advisories/OpenPKG-SA-2007.012.html · vendor-advisory, x_refsource_OPENPKG, x_transferred
• lists.suse.com /archive/suse-security-announce/2007-May/0006.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/25270 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/468670/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• vupen.com /english/advisories/2007/2281 · vdb-entry, x_refsource_VUPEN, x_transferred
• vupen.com /english/advisories/2007/2210 · vdb-entry, x_refsource_VUPEN, x_transferred
• h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01078980 · vendor-advisory, x_refsource_HP, x_transferred
• trustix.org /errata/2007/0017/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
• securitytracker.com /id?1018049 · vdb-entry, x_refsource_SECTRACK, x_transferred
• ubuntu.com /usn/usn-460-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• securityreason.com /securityalert/2701 · third-party-advisory, x_refsource_SREASON, x_transferred
• secunia.com /advisories/25241 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:104 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/25256 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• issues.rpath.com /browse/RPL-1366 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25259 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• slackware.com /security/viewer.php?l=slackware-security&y=2007&m=slackware-security.475906 · vendor-advisory, x_refsource_SLACKWARE, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-26-102964-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• debian.org /security/2007/dsa-1291 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• securityfocus.com /archive/1/468548/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/25232 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/25251 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-66-200588-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• ubuntu.com /usn/usn-460-2 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• secunia.com /advisories/25246 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• osvdb.org /34698 · vdb-entry, x_refsource_OSVDB, x_transferred
• secunia.com /advisories/25255 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• samba.org /samba/security/CVE-2007-2444.html · x_refsource_CONFIRM, x_transferred
• securityfocus.com /bid/23974 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/25675 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

• CVE List: CVE-2007-2444
• NVD: CVE-2007-2444

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.