Vulnerability in Samba
CVE-2009-1886
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
EPSS: 0.122 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Samba — versions 3.2.0, 3.2.1, 3.2.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
- secalert@redhat.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vendor-advisory, x_refsource_SLACKWARE)
- secalert@redhat.com (Patch, vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2009-1886?
- CVE-2009-1886 is a vulnerability in Samba, classified under Use of Externally-Controlled Format String. Published 2009-06-25.
- Is CVE-2009-1886 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.