Immunity, Inc.
Name samba_is_known_pipename
CVE CVE-2017-7494
Exploit Pack CANVAS
DescriptionSAMBA 4.x remote exploit
NotesReferences: https://www.samba.org/samba/security/CVE-2017-7494.html
CVE Name: CVE-2017-7494
VENDOR: Samba
Notes:

In order to use this exploit you need:
* Write access to a SAMBA share.
* Named pipes should be enabled in the SAMBA server.

Tested on Samba 4.1.6 (x86_64 and x86) on Ubuntu

For anonymously writable share:
python ./exploits/remote/unix/samba_is_known_pipename.py -t

Date public: May 24, 2017
Versions Tested: Ubuntu 14.04.3 LTS
CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7494
CVSS: 9.8

Learn more about the CANVAS Exploit Pack here: CANVAS