CVE-2009-1886: Critical severity Samba Samba vulnerability
Published Jun 24, 2009
·Updated
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
Affected Software
13 affected components
Samba Samba=3.2.5
Samba Samba=3.2.3
Samba Samba=3.2.4
Samba Samba=3.2.1
Samba Samba=3.2.9
Samba Samba=3.2.2
Samba Samba=3.2.7
Samba Samba=3.2.10
Samba Samba=3.2.12
Samba Samba=3.2.8
Samba Samba=3.2.11
Samba Samba=3.2.0
Samba Samba=3.2.6
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jun 24, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1886?
CVE-2009-1886 is considered a high severity vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2009-1886?
To fix CVE-2009-1886, upgrade Samba to a version later than 3.2.12.
3
What versions of Samba are affected by CVE-2009-1886?
CVE-2009-1886 affects Samba versions from 3.2.0 to 3.2.12.
4
Can CVE-2009-1886 be exploited remotely?
Yes, CVE-2009-1886 can be exploited remotely by attackers through specially crafted filenames.
5
What type of vulnerability is CVE-2009-1886?
CVE-2009-1886 is classified as a format string vulnerability.