CVE-2009-1888
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x...
5.8 MediumFix available
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
Exploit likelihood
4.61%Up 0.2 points since Feb 4, 2022
What each source reports
NVD Score used
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
CVE-2009-1888- CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
CVE-2009-1888- Updated
- 2026-11-02
EUVDEUVD-2009-1883No score
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
EUVD-2009-1883- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mh49-m393-pw96No score
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x...
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
GHSA-mh49-m393-pw96- Updated
- 2026-11-02
OSVNo score
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
CVE-2009-1888- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1888No score
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
- Record
DEBIAN-CVE-2009-1888- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10334-1No score
cifs-utils-6.5-1.5 on GA media
These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10334-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 | before 2:3.3.6-1 | 2:3.3.6-1 |
sambaDebian:13 | before 2:3.3.6-1 | 2:3.3.6-1 |
sambaDebian:14 | before 2:3.3.6-1 | 2:3.3.6-1 |
sambaDebian:5.0 From an advisory covering 2 CVEs | before 2:3.2.5-4lenny6, plus listed versions 2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny4 | 2:3.2.5-4lenny6 |
sambaRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
Show 58 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-clientRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-clientRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-commonRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
samba-swatRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs | before 0:3.0.33-0.18.el4_8 | 0:3.0.33-0.18.el4_8 |
sambaRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-clientRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-commonRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-swatRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
sambaRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-clientRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-commonRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
samba-swatRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:3.0.33-3.15.el5_4 | 0:3.0.33-3.15.el5_4 |
libsmbclientRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libsmbclient-develRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libtallocRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtalloc-develRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtdbRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libtdb-develRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
samba3xRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-clientRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-commonRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-debuginfoRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-docRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-domainjoin-guiRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-swatRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbindRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbind-develRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
tdb-toolsRed Hat:rhel_extras:5::client From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libsmbclientRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libsmbclient-develRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.0.34-46.el5 | 0:3.0.34-46.el5 |
libtallocRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtalloc-develRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:1.2.0-46.el5 | 0:1.2.0-46.el5 |
libtdbRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
libtdb-develRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
samba3xRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-clientRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-commonRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-debuginfoRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-docRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-domainjoin-guiRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-swatRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbindRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
samba3x-winbind-develRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:3.3.8-0.46.el5 | 0:3.3.8-0.46.el5 |
tdb-toolsRed Hat:rhel_extras:5::server From an advisory covering 4 CVEs | before 0:1.1.2-46.el5 | 0:1.1.2-46.el5 |
sambaopenSUSE:Tumbleweed From an advisory covering 56 CVEs | before 4.5.0-1.1 | 4.5.0-1.1 |
cifs-utilsopenSUSE:Tumbleweed From an advisory covering 9 CVEs | before 6.5-1.5 | 6.5-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1888 is a medium vulnerability (CVSS 5.8) in Samba, published June 24, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.61%, the 91st percentile. Fixed in samba 2:3.3.6-1.
References
vupen.com/english/advisories/2009/1664
debian.org/security/2009/dsa-1823
samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patch
securityfocus.com/archive/1/507856/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/51327
Show 99 moreShow less
secunia.com/advisories/35573
slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292
ubuntu.com/usn/USN-839-1
mandriva.com/security/advisories?name=MDVSA-2009:196
wiki.rpath.com/Advisories:rPSA-2009-0145
securitytracker.com/id?1022442
nvd.nist.gov/vuln/detail/CVE-2009-1888
github.com/advisories/GHSA-mh49-m393-pw96
security-tracker.debian.org/tracker/CVE-2009-1888
access.redhat.com/errata/RHSA-2009:1529
bugzilla.redhat.com/show_bug.cgi?id=526645
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1529.json
cve.org/CVERecord?id=CVE-2009-1888
samba.org/samba/history
redhat.com/support/policy/soc/production/preview_scope
suse.com/security/cve/CVE-2009-1886