What is CVE-2009-1888?

CVE-2009-1888 is a vulnerability in Samba, classified under CWE-264. Published 2009-06-25.

Is CVE-2009-1888 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Samba

CVE-2009-1888

The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.

Published 2009-06-25 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 5.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.046 (91.4th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 91st percentile — 91.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.046 · newest: 0.046 · change: 0.000

Affected products

Samba
Canonical Ubuntu Linux — versions 6.06, 8.04, 8.10
Debian Linux — versions 4.0, 5.0

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2009-1888

References

www.vupen.com/english/advisories/2009/1664 (Permissions Required, Third Party Advisory, vdb-entry)
www.debian.org/security/2009/dsa-1823 (vendor-advisory, Third Party Advisory)
www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch (Patch, Vendor Advisory)
www.samba.org/samba/security/CVE-2009-1888.html (Patch, Vendor Advisory)
www.securityfocus.com/archive/1/507856/100/0/threaded (mailing-list, VDB Entry, Third Party Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/51327 (VDB Entry, Third Party Advisory, vdb-entry)
secunia.com/advisories/35573 (Third Party Advisory, third-party-advisory)
www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch (Exploit, Patch, Vendor Advisory)
secunia.com/advisories/35606 (Third Party Advisory, third-party-advisory)
www.slackware.com/security/viewer.php (vendor-advisory, Third Party Advisory)

Frequently asked questions

What is CVE-2009-1888?: CVE-2009-1888 is a vulnerability in Samba, classified under CWE-264. Published 2009-06-25.
Is CVE-2009-1888 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.