CVE-2009-1888: canonical ubuntu_linux
Vulnerability summary
CVE-2009-1888 is a medium (CVSS 5.8) vulnerability in canonical ubuntu_linux. EPSS estimates a 4.61% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 2 public exploits are recorded.
Not severe (CVSS 5.8, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5 · Related 2Timeline
- 24-06-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.61%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
No change 0.00 pp
From 4.61% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (samba.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- samba< 2:3.3.6-1
- debian_linuxEOL4.0 | 5.0
Canonical1 product
- ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04
Samba1 product
- samba≥ 3.0.31, ≤ 3.0.35 | ≥ 3.2.0, < 3.2.13 | ≥ 3.3.0, < 3.3.6
3 vendors · 4 products
References
21 links- www.vupen.com/english/advisories/2009/1664VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
- www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1888.patchX Refsource CONFIRMPatchVendor Advisory
- www.securityfocus.com/archive/1/507856/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
- www.samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patchX Refsource CONFIRMExploitPatchVendor Advisory
- www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
Show all 21 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7292VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.samba.org/samba/ftp/patches/security/samba-3.3.5-CVE-2009-1888.patchX Refsource CONFIRMPatchVendor Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10790VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.mandriva.com/security/advisories?name=MDVSA-2009:196Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory