CVE-2009-1888

2009-06-2501:30:00

Debian Security Bug Tracker

security-tracker.debian.org

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

61.6%

JSON

The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.

OSVersionArchitecturePackageVersionFilename
Debian12allsamba< 2:3.3.6-1samba_2:3.3.6-1_all.deb
Debian11allsamba< 2:3.3.6-1samba_2:3.3.6-1_all.deb
Debian10allsamba< 2:3.3.6-1samba_2:3.3.6-1_all.deb
Debian999allsamba< 2:3.3.6-1samba_2:3.3.6-1_all.deb
Debian13allsamba< 2:3.3.6-1samba_2:3.3.6-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	samba	< 2:3.3.6-1	samba_2:3.3.6-1_all.deb
Debian	11	all	samba	< 2:3.3.6-1	samba_2:3.3.6-1_all.deb
Debian	10	all	samba	< 2:3.3.6-1	samba_2:3.3.6-1_all.deb
Debian	999	all	samba	< 2:3.3.6-1	samba_2:3.3.6-1_all.deb
Debian	13	all	samba	< 2:3.3.6-1	samba_2:3.3.6-1_all.deb