Remote exploitation of a command injection vulnerability within Samba Project’s Samba could allow an attacker to execute arbitrary code with nobody privileges. The vulnerability exists within the code responsible for updating a user’s password in the SAM database. Unfiltered user input is passed to “/bin/sh”. This allows an attacker to execute arbitrary shell commands with the privileges of the nobody user. iDefense has confirmed the existence of this vulnerability in Samba version 3.0.24. Previous versions of Samba release 3 may be vulnerable. Release version 2 and below did not have this feature.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56726/05.14.07-1.txt
Source: https://packetstormsecurity.com/files/56726/iDEFENSE-Security-Advisory-2007-05-14.1.html