CVE-2009-1888: Medium severity Samba Samba vulnerability
The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1888?
CVE-2009-1888 is categorized as a medium severity vulnerability due to its potential to allow unauthorized modification of access control lists.
How do I fix CVE-2009-1888?
To fix CVE-2009-1888, users should upgrade Samba to version 3.0.35, 3.2.13, 3.3.6 or later.
What systems are affected by CVE-2009-1888?
CVE-2009-1888 affects Samba versions 3.0.x prior to 3.0.35, 3.1.x, 3.2.x prior to 3.2.13, and 3.3.x prior to 3.3.6.
What kind of attacks can exploit CVE-2009-1888?
CVE-2009-1888 can be exploited by remote attackers to modify access control lists through uninitialized memory access.
Is CVE-2009-1888 related to any specific configurations?
Yes, CVE-2009-1888 is specifically related to configurations where dos filemode is enabled.