5.8

CVE-2009-1888

Exploit

The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version >= 3.0.31 <= 3.0.35
Samba ≫ Samba Version >= 3.2.0 < 3.2.13
Samba ≫ Samba Version >= 3.3.0 < 3.3.6
Debian ≫ Debian Linux Version4.0
Debian ≫ Debian Linux Version5.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version8.10
Canonical ≫ Ubuntu Linux Version9.04
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.39% 0.897
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
http://www.securityfocus.com/bid/35472
Third Party Advisory
Exploit
VDB Entry
http://www.vupen.com/english/advisories/2009/1664
Third Party Advisory
Permissions Required
http://www.securitytracker.com/id?1022442
Third Party Advisory
VDB Entry