What happened
Samba usermap script vulnerability enables remote code execution.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 16320Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)Metasploit2010-08-18VerifiedSploitusExploit for CVE-2007-2447. CVSS 6.Sploitus index2026-09-05T08:11:11+00:00Candidatekitploit.comSamba usermap script vulnerability enables remote code execution.hi2026-08-26T06:09:53CandidatePoC-in-GitHub · harshiys/CVE-2007-2447-Exploitation-SIEM-Detection-LabIsolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)★ 0harshiys2026-05-28CandidatePoC-in-GitHub · Mboatella25/metasploitable-pentest-labPentest completo sobre Metasploitable: recon con nmap, explotación con Metasploit (CVE-2007-2447), extracción y cracking de credenciales, persistencia SSH★ 0Mboatella252026-07-17CandidatePoC-in-GitHub · EthicalHackingLabs/metasploitable2-exploitation-metasploitFull Metasploit exploitation walkthrough against Metasploitable2 — vsftpd backdoor, Samba CVE-2007-2447, UnrealIRCd backdoor, Netcat exfiltration, and credential cracking prep.★ 0EthicalHackingLabs2026-06-26CandidatePoC-in-GitHub · r3vpwnx/CVE-2007-2447Samba 3.0.20 CVE-2007-2447 Exploit★ 0r3vpwnx2026-02-14CandidatePoC-in-GitHub · DesmondHinds94/S22_The_Verification_ProtocolP1 W8 S22 - Metasploit Samba CVE-2007-2447 Exploitation★ 0DesmondHinds942026-05-29Candidatejaden-mas1010/Metasploitable2-Vulnerability-AssessmentEnd‑to‑end Metasploitable2 vulnerability assessment covering reconnaissance, exploitation (vsftpd backdoor, distcc RCE, Samba CVE‑2007‑2447), reverse‑shell handling, and Wireshark traffic analysis. Includes SOC‑style documentation, evidence, and mitigation recommendations.★ 0jaden-mas10102026-05-26CandidatePoC-in-GitHub · Youneskc/SMB-Penetration-Testing-NTLM-Relay-Version-2-SMB Red Team Lab— NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10★ 0Youneskc2026-05-19CandidatePoC-in-GitHub · Daviddoctor/Samba-CVE-2007-2447-Exploit-Username-Map-ScriptSamba CVE-2007-2447 Exploit★ 0Daviddoctor2026-04-17CandidateNyabayo/flatiron-pentest-nmap-enum4linux-smb-ftp-samba-metasploitable2-kali-healthcare-reportflatiron cyberdefense penetration testing scanning enumeration nmap sV sS T4 enum4linux smb ftp vsftpd samba telnet vnc mysql nfs ssh metasploitable2 kali linux healthcare staging cve 2011 2523 cve 2007 2447 cve 2010 2075 vulnerability assessment lab★ 0Nyabayo2026-04-10CandidatePoC-in-GitHub · vig9610/Exploiting-Samba-on-Metasploitable-2Utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability (CVE-2007-2447). This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been accessed, it should reveal the /etc/shadow folder which would give proof of compromise.★ 0vig96102026-01-16CandidatePoC-in-GitHub · amriunix/CVE-2007-2447CVE-2007-2447 - Samba usermap script★ 61amriunix2018-08-03CandidatePoC-in-GitHub · Unix13/metasploitable2PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.★ 4Unix132019-07-05CandidatePoC-in-GitHub · b1fair/smb_usermapA simple exploit for CVE-2007-2447★ 0b1fair2019-09-30CandidatePoC-in-GitHub · JoseBarrios/CVE-2007-2447Remote Command Injection Vulnerability (CVE-2007-2447), allows remote attackers to execute arbitrary commands by specifying a Samba username containing shell meta characters.★ 1JoseBarrios2020-01-20CandidatePoC-in-GitHub · 3x1t1um/CVE-2007-2447★ 13x1t1um2020-04-22CandidatePoC-in-GitHub · xlcc4096/exploit-CVE-2007-2447Exploit for the vulnerability CVE-2007-2447★ 0xlcc40962020-12-06CandidatePoC-in-GitHub · WildfootW/CVE-2007-2447_Samba_3.0.25rc3★ 0WildfootW2020-12-09CandidatePoC-in-GitHub · Ziemni/CVE-2007-2447-in-PythonPython implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 < 3.0.25rc3 (CVE-2007-2447).★ 3Ziemni2021-02-22CandidatePoC-in-GitHub · 0xKn/CVE-2007-2447★ 00xKn2021-03-06CandidatePoC-in-GitHub · ozuma/CVE-2007-2447Exploit Samba★ 1ozuma2021-03-14CandidatePoC-in-GitHub · G01d3nW01f/CVE-2007-2447cve-2007-2447 this script was rewrite the part of Metasploit modules to python3★ 0G01d3nW01f2021-04-16CandidatePoC-in-GitHub · Alien0ne/CVE-2007-2447CVE-2007-2447 - Samba usermap script★ 3Alien0ne2021-06-30CandidatePoC-in-GitHub · 3t4n/samba-3.0.24-CVE-2007-2447-vunerable-★ 03t4n2021-07-23CandidatePoC-in-GitHub · xbufu/CVE-2007-2447Exploit code for CVE-2007-2447 written in Python3.★ 2xbufu2021-10-03CandidatePoC-in-GitHub · Nosferatuvjr/Samba-Usermap-exploitCVE-2007-2447★ 1Nosferatuvjr2022-05-10CandidatePoC-in-GitHub · testaross4/CVE-2007-2447★ 0testaross42022-05-13CandidatePoC-in-GitHub · b33m0x00/CVE-2007-2447CVE-2007-2447 samba remote code execution★ 0b33m0x002022-07-20CandidatePoC-in-GitHub · HerculesRD/PyUsernameMapScriptRCECVE-2007-2447 exploit written in python to get reverse shell★ 0HerculesRD2022-08-07CandidatePoC-in-GitHub · Aviksaikat/CVE-2007-2447automated script for exploiting CVE-2007-2447★ 1Aviksaikat2022-10-14CandidatePoC-in-GitHub · h3x0v3rl0rd/CVE-2007-2447Exploit Samba smbd 3.0.20-Debian★ 5h3x0v3rl0rd2022-10-25CandidatePoC-in-GitHub · bdunlap9/CVE-2007-2447_pythonExploit i used in HTB★ 0bdunlap92022-12-27CandidatePoC-in-GitHub · MikeRega7/CVE-2007-2447-RCESamba 3.0.20★ 0MikeRega72023-06-15CandidatePoC-in-GitHub · ShivamDey/Samba-CVE-2007-2447-Exploit★ 0ShivamDey2023-10-21CandidatePoC-in-GitHub · Juantos/cve-2007-2447Samba 3.0.0 - 3.0.25rc3★ 0Juantos2024-01-28CandidatePoC-in-GitHub · IamLucif3r/CVE-2007-2447-ExploitThis is a exploit for CVE-2007-2447; Vulnerable SMB★ 0IamLucif3r2024-07-08CandidatePoC-in-GitHub · foudadev/CVE-2007-2447★ 0foudadev2024-07-09CandidatePoC-in-GitHub · elphon/CVE-2007-2447-Exploit★ 0elphon2025-03-08CandidatePoC-in-GitHub · DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2★ 0DevinLiggins142025-06-19CandidatePoC-in-GitHub · MrRoma577/exploit_cve-2007-2447_againjust remeber how small mistake in santisize username could give yoy root access to the full machine★ 0MrRoma5772025-07-11CandidatePoC-in-GitHub · nika0x38/CVE-2007-2447A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian.★ 0nika0x382025-08-27CandidatePoC-in-GitHub · SeifEldienAhmad/Penetration-Testing-on-Metasploitable2Hands-on pentest project using Kali Linux vs Metasploitable2. Includes full workflow: Nmap scanning, enumeration, Metasploit exploitation (Samba CVE-2007-2447), post-exploitation validation, and mitigation steps. Repo contains commands, outputs, and report showing both offensive techniques and defensive recommendations.★ 1SeifEldienAhmad2025-09-13CandidatePoC-in-GitHub · nulltrace1336/Samba-Exploit-CVE-2007-2447★ 0nulltrace13362025-12-23CandidatePoC-in-GitHub · abdulsaabir/CVE-2007-2447★ 1abdulsaabir2026-01-04CandidatePoC-in-GitHub · ronankongala/metasploit-pentest-reportAuthorized penetration test against Metasploitable2 and TryHackMe Blue. 3 CVEs exploited (CVE-2011-2523, CVE-2007-2447, CVE-2017-0144), 4 findings with CVSS scoring and MITRE ATT&CK mapping.★ 0ronankongala2026-08-29CandidateSploitusExploit for CVE-2007-2447. CVSS 6.Sploitus index2026-09-12T15:07:20+00:00CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.