CVE-2009-1888

no score yetEPSS 4.6%

The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.

EPSS: 4.6% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-06-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
debian:debian_linux
samba:samba

References

http://secunia.com/advisories/35539
http://secunia.com/advisories/35573
http://secunia.com/advisories/35606
http://secunia.com/advisories/36918
http://wiki.rpath.com/Advisories:rPSA-2009-0145

Check your stack JSON