目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1000 CNY

100.0%
コーヒーを一杯おごる

CVE-2007-2447— Samba MS-RPC Shell命令注入漏洞

EPSS 77.38% · P99
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2007-2447の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
N/A
ソース: NVD (National Vulnerability Database)
脆弱性説明
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote authenticated users to execute commands via shell metacharacters involving other MS-RPC functions in the (2) remote printer and (3) file share management.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Samba MS-RPC Shell命令注入漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Samba是Samba团队开发的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。 Samba在处理用户数据时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 Samba中负责在SAM数据库更新用户口令的代码未经过滤便将用户输入传输给了/bin/sh。如果在调用smb.conf中定义的外部脚本时，通过对/bin/sh的MS-RPC调用提交了恶意输入的话，就可能允许攻击者以nobody用户的权限执
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
-n/a n/a -

II. CVE-2007-2447の公開POC

#POC説明ソースリンクShenlongリンク
1CVE-2007-2447 - Samba usermap scripthttps://github.com/amriunix/CVE-2007-2447POC詳細
2A simple exploit for CVE-2007-2447https://github.com/b1fair/smb_usermapPOC詳細
3Remote Command Injection Vulnerability (CVE-2007-2447), allows remote attackers to execute arbitrary commands by specifying a Samba username containing shell meta characters.https://github.com/JoseBarrios/CVE-2007-2447POC詳細
4Nonehttps://github.com/3x1t1um/CVE-2007-2447POC詳細
5Exploit for the vulnerability CVE-2007-2447https://github.com/xlcc4096/exploit-CVE-2007-2447POC詳細
6Nonehttps://github.com/WildfootW/CVE-2007-2447_Samba_3.0.25rc3POC詳細
7Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 < 3.0.25rc3 (CVE-2007-2447).https://github.com/Ziemni/CVE-2007-2447-in-PythonPOC詳細
8Nonehttps://github.com/0xKn/CVE-2007-2447POC詳細
9Exploit Sambahttps://github.com/ozuma/CVE-2007-2447POC詳細
10Samba 3.0.20 username map script exploithttps://github.com/un4gi/CVE-2007-2447POC詳細
11cve-2007-2447 this script was rewrite the part of Metasploit modules to python3https://github.com/G01d3nW01f/CVE-2007-2447POC詳細
12 Samba usermap script.https://github.com/cherrera0001/CVE-2007-2447POC詳細
13CVE-2007-2447 - Samba usermap scripthttps://github.com/Alien0ne/CVE-2007-2447POC詳細
14Nonehttps://github.com/3t4n/samba-3.0.24-CVE-2007-2447-vunerable-POC詳細
15Exploit code for CVE-2007-2447 written in Python3.https://github.com/xbufu/CVE-2007-2447POC詳細
16Nonehttps://github.com/s4msec/CVE-2007-2447POC詳細
17Nonehttps://github.com/0xConstant/CVE-2007-2447POC詳細
18CVE-2007-2447https://github.com/Nosferatuvjr/Samba-Usermap-exploitPOC詳細
19Nonehttps://github.com/testaross4/CVE-2007-2447POC詳細
20CVE-2007-2447 samba remote code executionhttps://github.com/mr-l0n3lly/CVE-2007-2447POC詳細
21CVE-2007-2447 exploit written in python to get reverse shellhttps://github.com/HerculesRD/PyUsernameMapScriptRCEPOC詳細
22automated script for exploiting CVE-2007-2447https://github.com/Aviksaikat/CVE-2007-2447POC詳細
23Nonehttps://github.com/crypticdante/CVE-2007-2447POC詳細
24Exploit i used in HTBhttps://github.com/bdunlap9/CVE-2007-2447_pythonPOC詳細
25Samba 3.0.20https://github.com/MikeRega7/CVE-2007-2447-RCEPOC詳細
26Samba Reverse Shellhttps://github.com/0xTabun/CVE-2007-2447POC詳細
27Nonehttps://github.com/ShivamDey/Samba-CVE-2007-2447-ExploitPOC詳細
28Nonehttps://github.com/H3xL00m/CVE-2007-2447POC詳細
29Nonehttps://github.com/n3ov4n1sh/CVE-2007-2447POC詳細
30Samba 3.0.0 - 3.0.25rc3https://github.com/Juantos/cve-2007-2447POC詳細
31Nonehttps://github.com/c0d3cr4f73r/CVE-2007-2447POC詳細
32Exploit Samba smbd 3.0.20-Debianhttps://github.com/Sp3c73rSh4d0w/CVE-2007-2447POC詳細
33This is a exploit for CVE-2007-2447; Vulnerable SMB https://github.com/IamLucif3r/CVE-2007-2447-ExploitPOC詳細
34Exploit Samba smbd 3.0.20-Debianhttps://github.com/0xwh1pl4sh/CVE-2007-2447POC詳細
35Exploit Samba smbd 3.0.20-Debianhttps://github.com/N3rdyN3xus/CVE-2007-2447POC詳細
36Exploit Samba smbd 3.0.20-Debianhttps://github.com/NyxByt3/CVE-2007-2447POC詳細
37Exploit Samba smbd 3.0.20-Debianhttps://github.com/h3xcr4ck3r/CVE-2007-2447POC詳細
38Exploit Samba smbd 3.0.20-Debianhttps://github.com/n3rdh4x0r/CVE-2007-2447POC詳細
39Nonehttps://github.com/banomaly/CVE-2007-2447POC詳細
40Nonehttps://github.com/foudadev/CVE-2007-2447POC詳細
41CVE-2007-2447 samba remote code executionhttps://github.com/b3m0x00/CVE-2007-2447POC詳細
42CVE-2007-2447 samba remote code executionhttps://github.com/b33m0x00/CVE-2007-2447POC詳細
43Nonehttps://github.com/elphon/CVE-2007-2447-ExploitPOC詳細
44Exploit Samba smbd 3.0.20-Debianhttps://github.com/h3x0v3rl0rd/CVE-2007-2447POC詳細
45Nonehttps://github.com/DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2POC詳細
46just remeber how small mistake in santisize username could give yoy root access to the full machine https://github.com/MrRoma577/exploit_cve-2007-2447_againPOC詳細
47A Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian.https://github.com/nika0x38/CVE-2007-2447POC詳細
48Hands-on pentest project using Kali Linux vs Metasploitable2. Includes full workflow: Nmap scanning, enumeration, Metasploit exploitation (Samba CVE-2007-2447), post-exploitation validation, and mitigation steps. Repo contains commands, outputs, and report showing both offensive techniques and defensive recommendations.https://github.com/SeifEldienAhmad/Penetration-Testing-on-Metasploitable2POC詳細
49Nonehttps://github.com/nulltrace1336/Samba-Exploit-CVE-2007-2447POC詳細
50Nonehttps://github.com/abdulsaabir/CVE-2007-2447POC詳細
51Samba 3.0.20 CVE-2007-2447 Exploithttps://github.com/r0tn3x/CVE-2007-2447POC詳細
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2007-2447のインテリジェンス情報

お願いします ログイン より多くのインテリジェンス情報を見る

Same Patch Batch · n/a · 2007-05-14 · 41 CVEs total

CVE-2007-2668Webdesproxy GET Request 缓冲区溢出漏洞
CVE-2007-2659PhpATM 'Index.PHP' 目录遍历漏洞
CVE-2007-2660Vincent Blavet PhpConcept Library PHP远程文件包含漏洞
CVE-2007-2661BlogMe 'Archshow.ASP' SQL注入漏洞
CVE-2007-2662EfesTECH Haber 多个SQL注入漏洞
CVE-2007-2663Beacon 'Splash.lang.PHP' languagePath参数远程文件包含漏洞
CVE-2007-2664Yaap 'common.php' PHP远程文件包含漏洞
CVE-2007-2665RETIRED: PHPFirstPost 'Block.PHP' 远程文件包含漏洞
CVE-2007-2666Notepad++ Ruby源文件处理远程栈溢出漏洞
CVE-2007-2667DB Software Laboratory VImpX控件远程栈溢出漏洞
CVE-2007-2658ID Automation Linear Barcode ActiveX控件远程栈溢出漏洞
CVE-2007-2669PHPChain 多个跨站脚本攻击漏洞
CVE-2007-2670PHPChain 多个跨站脚本攻击漏洞
CVE-2007-2671Mozilla Firefox HREF属性拒绝服务漏洞
CVE-2007-2672PHP Coupon Script 'index.php' SQL注入漏洞
CVE-2007-2673Censura 'Censura.PHP' SQL注入漏洞
CVE-2007-2674Pre Shopping Mall 'Detail.PHP' SQL注入漏洞
CVE-2007-2675Pre Classifieds Listings 'search.php' SQL注入漏洞
CVE-2007-2676Open Translation Engine 'Header.PHP'远程文件包含漏洞
CVE-2007-2677PHPChess Root_Path 'language.php' 多个远程文件包含漏洞

Showing 20 of 41 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: n/a
同じベンダー: n/a

V. CVE-2007-2447へのコメント

まだコメントはありません

コメントを残す