Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary…

Description

Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privileges and execute SMB/CIFS protocol operations via unspecified vectors that cause the daemon to transition to the root user.

Scores

EPSS (exploitation in 30 days)

0.78% · top 44% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.2.

Weakness

• n/a
• CWE-269 (opens in a new tab)All about CWE-269 and its CVEs

Affected products

• n/a

  • affected n/a

References (34)

• GLSA-200705-15 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 25289 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• ADV-2007-1805 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 25772 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• OpenPKG-SA-2007.012 (opens in a new tab)vendor-advisoryx_refsource_OPENPKGx_transferred
• SUSE-SA:2007:031 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• 25270 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 20070515 FLEA-2007-0017-1: samba (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• ADV-2007-2281 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• ADV-2007-2210 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• HPSBTU02218 (opens in a new tab)vendor-advisoryx_refsource_HPx_transferred
• 2007-0017 (opens in a new tab)vendor-advisoryx_refsource_TRUSTIXx_transferred
• 1018049 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• USN-460-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 2701 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
• 25241 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2007:104 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 25256 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://issues.rpath.com/browse/RPL-1366 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 25259 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• SSA:2007-134-01 (opens in a new tab)vendor-advisoryx_refsource_SLACKWAREx_transferred
• 102964 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• DSA-1291 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 20070513 [SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 25232 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 25251 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 200588 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• USN-460-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 25246 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 34698 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 25255 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.samba.org/samba/security/CVE-2007-2444.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 23974 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 25675 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2007-2444](https://trackcve.app/badge/CVE-2007-2444.svg)](https://trackcve.app/cve/CVE-2007-2444)

Record last updated 7 Aug 2024, 13:42 UTC.