Unscored severity · published Jun 25, 2009
CVE-2009-1888
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled,…
–
CVSS
4.6%
EPSS
No
On KEV
Description
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.6% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
4.0; 5.0 · source: NVD
SA
Samba · Samba
3.0.31 through 3.0.35; 3.2.0 before 3.2.13; 3.3.0 before 3.3.6 · source: NVD
UL
Ubuntu Linux · Canonical
6.06; 8.04; 8.10; 9.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1888
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1888
Third Party Advisory
http://secunia.com/advisories/35539
Third Party Advisory
http://secunia.com/advisories/35573
Third Party Advisory
http://secunia.com/advisories/35606
Third Party Advisory
http://secunia.com/advisories/36918
Third Party Advisory
http://wiki.rpath.com/Advisories:rPSA-2009-0145
Third Party Advisory
http://www.debian.org/security/2009/dsa-1823
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation