CVEvulnerability
CVE-2009-1886
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
Affected configurations
• samba samba 3.2.0
• samba samba 3.2.1
• samba samba 3.2.2
• samba samba 3.2.3
• samba samba 3.2.4
• samba samba 3.2.5
• samba samba 3.2.6
• samba samba 3.2.7
• samba samba 3.2.8
• samba samba 3.2.9
• samba samba 3.2.10
• samba samba 3.2.11
• samba samba 3.2.12
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://secunia.com/advisories/35539 Vendor Advisory
- http://secunia.com/advisories/35573 secunia.com
- http://secunia.com/advisories/35606 secunia.com
- http://secunia.com/advisories/36918 secunia.com
- http://www.debian.org/security/2009/dsa-1823 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:196 www.mandriva.com
- http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch Patch, Vendor Advisory
- http://www.samba.org/samba/security/CVE-2009-1886.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35472 Patch
- http://www.securitytracker.com/id?1022441 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591 www.slackware.com
- http://www.ubuntu.com/usn/USN-839-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/1664 Patch, Vendor Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=6478 bugzilla.samba.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51328 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/35539 Vendor Advisory
- http://secunia.com/advisories/35573 secunia.com
- http://secunia.com/advisories/35606 secunia.com
- http://secunia.com/advisories/36918 secunia.com
- http://www.debian.org/security/2009/dsa-1823 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:196 www.mandriva.com
- http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch Patch, Vendor Advisory
- http://www.samba.org/samba/security/CVE-2009-1886.html Patch, Vendor Advisory
- http://www.securityfocus.com/bid/35472 Patch
- http://www.securitytracker.com/id?1022441 www.securitytracker.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591 www.slackware.com
- http://www.ubuntu.com/usn/USN-839-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2009/1664 Patch, Vendor Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=6478 bugzilla.samba.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51328 exchange.xforce.ibmcloud.com