fkie_cve-2009-1886
Vulnerability from fkie_nvd
Published
2009-06-25 01:30
Modified
2025-04-09 00:30
Severity ?
Summary
Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.
References
secalert@redhat.comhttp://secunia.com/advisories/35539Vendor Advisory
secalert@redhat.comhttp://secunia.com/advisories/35573
secalert@redhat.comhttp://secunia.com/advisories/35606
secalert@redhat.comhttp://secunia.com/advisories/36918
secalert@redhat.comhttp://www.debian.org/security/2009/dsa-1823
secalert@redhat.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:196
secalert@redhat.comhttp://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patchPatch, Vendor Advisory
secalert@redhat.comhttp://www.samba.org/samba/security/CVE-2009-1886.htmlPatch, Vendor Advisory
secalert@redhat.comhttp://www.securityfocus.com/bid/35472Patch
secalert@redhat.comhttp://www.securitytracker.com/id?1022441
secalert@redhat.comhttp://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
secalert@redhat.comhttp://www.ubuntu.com/usn/USN-839-1
secalert@redhat.comhttp://www.vupen.com/english/advisories/2009/1664Patch, Vendor Advisory
secalert@redhat.comhttps://bugzilla.samba.org/show_bug.cgi?id=6478
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/51328
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35539Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35573
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35606
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36918
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2009/dsa-1823
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2009:196
af854a3a-2127-422b-91ae-364da2661108http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patchPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.samba.org/samba/security/CVE-2009-1886.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/35472Patch
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1022441
af854a3a-2127-422b-91ae-364da2661108http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-839-1
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/1664Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.samba.org/show_bug.cgi?id=6478
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/51328
Impacted products
Vendor Product Version
samba samba 3.2.0
samba samba 3.2.1
samba samba 3.2.2
samba samba 3.2.3
samba samba 3.2.4
samba samba 3.2.5
samba samba 3.2.6
samba samba 3.2.7
samba samba 3.2.8
samba samba 3.2.9
samba samba 3.2.10
samba samba 3.2.11
samba samba 3.2.12



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "44746973-3CFD-4808-9545-755E296EFF6B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "31E4627C-5D19-4599-B304-D0E4D4193170",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEE162A7-969D-44D5-B9ED-764F20F19C87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "28DF45AE-DF03-4321-A019-D3BBC16433B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "64D87AD2-89F2-455F-916E-D404E6BD02C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6218AB51-DE71-40F3-8CBC-AF33586D36EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D02F8427-0DCC-48A9-A04F-939571D511E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4AEDE0A-B15C-4B0B-AFE9-4F96E5F71429",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC8A9943-6949-4B0A-9864-8B4696704098",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF1D6FEB-A3C8-41D1-B222-3AD11DB9C4AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "4970BB40-085C-4069-B6F1-7E3726F1CFCF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F1E6CDA-36BF-4374-BBDF-B6DD52598AA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA43C063-EBE1-4C61-9C9E-C84C3A594A52",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples vulnerabilidades de formato de cadena en client/client.c en smbclient en Samba v3.2.0 hasta v3.2.12 podr\u00eda permitir dependiendo del contexto a atacantes ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s del formato de cadena especificado en un nombre de fichero."
    }
  ],
  "id": "CVE-2009-1886",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-06-25T01:30:01.717",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35539"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/35573"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/35606"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/36918"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2009/dsa-1823"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.samba.org/samba/security/CVE-2009-1886.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35472"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securitytracker.com/id?1022441"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.521591"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.ubuntu.com/usn/USN-839-1"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1664"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://bugzilla.samba.org/show_bug.cgi?id=6478"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51328"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/35539"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/35573"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/35606"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/36918"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2009/dsa-1823"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2009:196"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.samba.org/samba/security/CVE-2009-1886.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/35472"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1022441"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2009\u0026m=slackware-security.521591"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-839-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1664"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.samba.org/show_bug.cgi?id=6478"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51328"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vendorComments": [
    {
      "comment": "Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 3, 4, or 5.",
      "lastModified": "2009-06-29T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-134"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…