What happened
A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 16320Samba 3.0.20 < 3.0.25rc3 - 'Username' map script' Command Execution (Metasploit)Metasploit2010-08-18VerifiedPoC-in-GitHub · amriunix/CVE-2007-2447CVE-2007-2447 - Samba usermap script★ 62amriunix2018-08-03CandidatePoC-in-GitHub · Unix13/metasploitable2PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured NFS files, etc.★ 4Unix132019-07-05CandidatePoC-in-GitHub · b1fair/smb_usermapA simple exploit for CVE-2007-2447★ 0b1fair2019-09-30CandidatePoC-in-GitHub · JoseBarrios/CVE-2007-2447Remote Command Injection Vulnerability (CVE-2007-2447), allows remote attackers to execute arbitrary commands by specifying a Samba username containing shell meta characters.★ 1JoseBarrios2020-01-20CandidatePoC-in-GitHub · 3x1t1um/CVE-2007-2447★ 13x1t1um2020-04-22CandidatePoC-in-GitHub · xlcc4096/exploit-CVE-2007-2447Exploit for the vulnerability CVE-2007-2447★ 0xlcc40962020-12-06CandidatePoC-in-GitHub · WildfootW/CVE-2007-2447_Samba_3.0.25rc3★ 0WildfootW2020-12-09CandidatePoC-in-GitHub · Ziemni/CVE-2007-2447-in-PythonPython implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 < 3.0.25rc3 (CVE-2007-2447).★ 3Ziemni2021-02-22CandidatePoC-in-GitHub · 0xKn/CVE-2007-2447★ 00xKn2021-03-06CandidatePoC-in-GitHub · ozuma/CVE-2007-2447Exploit Samba★ 1ozuma2021-03-14CandidatePoC-in-GitHub · G01d3nW01f/CVE-2007-2447cve-2007-2447 this script was rewrite the part of Metasploit modules to python3★ 0G01d3nW01f2021-04-16CandidatePoC-in-GitHub · Alien0ne/CVE-2007-2447CVE-2007-2447 - Samba usermap script★ 3Alien0ne2021-06-30CandidatePoC-in-GitHub · 3t4n/samba-3.0.24-CVE-2007-2447-vunerable-★ 03t4n2021-07-23CandidatePoC-in-GitHub · xbufu/CVE-2007-2447Exploit code for CVE-2007-2447 written in Python3.★ 2xbufu2021-10-03CandidatePoC-in-GitHub · Nosferatuvjr/Samba-Usermap-exploitCVE-2007-2447★ 1Nosferatuvjr2022-05-10CandidatePoC-in-GitHub · testaross4/CVE-2007-2447★ 0testaross42022-05-13CandidatePoC-in-GitHub · b33m0x00/CVE-2007-2447CVE-2007-2447 samba remote code execution★ 0b33m0x002022-07-20CandidatePoC-in-GitHub · HerculesRD/PyUsernameMapScriptRCECVE-2007-2447 exploit written in python to get reverse shell★ 0HerculesRD2022-08-07CandidatePoC-in-GitHub · Aviksaikat/CVE-2007-2447automated script for exploiting CVE-2007-2447★ 1Aviksaikat2022-10-14CandidatePoC-in-GitHub · h3x0v3rl0rd/CVE-2007-2447Exploit Samba smbd 3.0.20-Debian★ 5h3x0v3rl0rd2022-10-25CandidatePoC-in-GitHub · bdunlap9/CVE-2007-2447_pythonExploit i used in HTB★ 0bdunlap92022-12-27CandidatePoC-in-GitHub · MikeRega7/CVE-2007-2447-RCESamba 3.0.20★ 0MikeRega72023-06-15CandidatePoC-in-GitHub · ShivamDey/Samba-CVE-2007-2447-Exploit★ 0ShivamDey2023-10-21CandidatePoC-in-GitHub · Juantos/cve-2007-2447Samba 3.0.0 - 3.0.25rc3★ 0Juantos2024-01-28CandidatePoC-in-GitHub · IamLucif3r/CVE-2007-2447-ExploitThis is a exploit for CVE-2007-2447; Vulnerable SMB★ 0IamLucif3r2024-07-08CandidatePoC-in-GitHub · foudadev/CVE-2007-2447★ 0foudadev2024-07-09CandidatePoC-in-GitHub · elphon/CVE-2007-2447-Exploit★ 0elphon2025-03-08CandidatePoC-in-GitHub · DevinLiggins14/SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2★ 0DevinLiggins142025-06-19CandidatePoC-in-GitHub · MrRoma577/exploit_cve-2007-2447_againjust remeber how small mistake in santisize username could give yoy root access to the full machine★ 0MrRoma5772025-07-11CandidatePoC-in-GitHub · nika0x38/CVE-2007-2447A standalone Rust implementation of the CVE-2007-2447 exploit targeting Samba smbd 3.0.20-Debian.★ 0nika0x382025-08-27CandidatePoC-in-GitHub · SeifEldienAhmad/Penetration-Testing-on-Metasploitable2Hands-on pentest project using Kali Linux vs Metasploitable2. Includes full workflow: Nmap scanning, enumeration, Metasploit exploitation (Samba CVE-2007-2447), post-exploitation validation, and mitigation steps. Repo contains commands, outputs, and report showing both offensive techniques and defensive recommendations.★ 1SeifEldienAhmad2025-09-13CandidatePoC-in-GitHub · nulltrace1336/Samba-Exploit-CVE-2007-2447★ 0nulltrace13362025-12-23CandidatePoC-in-GitHub · abdulsaabir/CVE-2007-2447★ 1abdulsaabir2026-01-04CandidatePoC-in-GitHub · vig9610/Exploiting-Samba-on-Metasploitable-2Utilize metasploit from a Kali Linux machine to exploit a well-known samba vulnerability (CVE-2007-2447). This is done in order to infiltrate a Metasploitable 2 machine with a reverse shell to access the root folder. Once this folder has been accessed, it should reveal the /etc/shadow folder which would give proof of compromise.★ 0vig96102026-01-16CandidatePoC-in-GitHub · r3vpwnx/CVE-2007-2447Samba 3.0.20 CVE-2007-2447 Exploit★ 0r3vpwnx2026-02-14CandidatePoC-in-GitHub · Daviddoctor/Samba-CVE-2007-2447-Exploit-Username-Map-ScriptSamba CVE-2007-2447 Exploit★ 0Daviddoctor2026-04-17CandidatePoC-in-GitHub · Youneskc/SMB-Penetration-Testing-NTLM-Relay-Version-2-SMB Red Team Lab— NTLM Relay via LLMNR Poisoning, CVE-2007-2447, NTLMv2 Hash Cracking & NT AUTHORITY\SYSTEM on Windows 10★ 0Youneskc2026-05-19CandidatePoC-in-GitHub · harshiys/CVE-2007-2447-Exploitation-SIEM-Detection-LabIsolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)★ 0harshiys2026-05-28CandidatePoC-in-GitHub · DesmondHinds94/S22_The_Verification_ProtocolP1 W8 S22 - Metasploit Samba CVE-2007-2447 Exploitation★ 0DesmondHinds942026-05-29CandidatePoC-in-GitHub · EthicalHackingLabs/metasploitable2-exploitation-metasploitFull Metasploit exploitation walkthrough against Metasploitable2 — vsftpd backdoor, Samba CVE-2007-2447, UnrealIRCd backdoor, Netcat exfiltration, and credential cracking prep.★ 0EthicalHackingLabs2026-06-26CandidatePoC-in-GitHub · Mboatella25/metasploitable-pentest-labPentest completo sobre Metasploitable: recon con nmap, explotación con Metasploit (CVE-2007-2447), extracción y cracking de credenciales, persistencia SSH★ 0Mboatella252026-07-17CandidatePoC-in-GitHub · ronankongala/metasploit-pentest-reportAuthorized penetration test against Metasploitable2 and TryHackMe Blue. 3 CVEs exploited (CVE-2011-2523, CVE-2007-2447, CVE-2017-0144), 4 findings with CVSS scoring and MITRE ATT&CK mapping.★ 0ronankongala2026-08-29CandidatePoC-in-GitHub · rushikesh-a-bhujbal/CVE-2007-2447Samba 3.0.20 username map script command injection exploit — reverse shell via SMB authentication, built from scratch in Python using impacket. No Metasploit.★ 0rushikesh-a-bhujbal2026-09-25CandidatePoC-in-GitHub · malredfan/xxxxxxxxxxxxxxxxPenetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)★ 0malredfan2026-10-06CandidatePoC-in-GitHub · malredfan/vvvvvvvv2Penetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)★ 0malredfan2026-10-06CandidatePoC-in-GitHub · malredfan/ggggggggggggggggggPenetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)★ 0malredfan2026-10-06CandidatePoC-in-GitHub · malredfan/metasploitable2-pentestPenetration test for Metasploitable 2 — Samba 3.0.20 Username Map Script (CVE-2007-2447)★ 0malredfan2026-10-06CandidateSploitusExploit for CVE-2007-2447. CVSS 6.Sploitus index2026-10-10T13:47:18+00:00CandidatePoC-in-GitHub · ddiazcr/home-soc-labBlue Team home lab: full incident response lifecycle (attack → detect → respond) with Wazuh SIEM + Suricata IDS, CVE-2007-2447 exploitation, MITRE ATT&CK mapping, and an AI-assisted alert triage pipeline.★ 0ddiazcr2026-09-23CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.