5.8

CVE-2009-1888

Exploit
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version >= 3.0.31 <= 3.0.35
Samba ≫ Samba Version >= 3.2.0 < 3.2.13
Samba ≫ Samba Version >= 3.3.0 < 3.3.6
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.61% 0.905
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/35539
Third Party Advisory
http://secunia.com/advisories/35573
Third Party Advisory
http://secunia.com/advisories/35606
Third Party Advisory
http://secunia.com/advisories/36918
Third Party Advisory
http://www.debian.org/security/2009/dsa-1823
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2009:196
Third Party Advisory
http://www.securityfocus.com/bid/35472
Third Party Advisory
Exploit
VDB Entry
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
Third Party Advisory
http://www.ubuntu.com/usn/USN-839-1
Third Party Advisory
http://www.vupen.com/english/advisories/2009/1664
Third Party Advisory
Permissions Required
http://wiki.rpath.com/Advisories:rPSA-2009-0145
Third Party Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch
Patch
Vendor Advisory
Exploit
http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch
Patch
Vendor Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patch
Patch
Vendor Advisory
http://www.samba.org/samba/security/CVE-2009-1888.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/507856/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022442
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/51327
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790
Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292
Third Party Advisory