PT-2009-4350 · Samba Team+1 · Samba

Jeremy Allison + 1 · Publicado 2009-06-23 · Atualizado 2024-06-15 · CVE-2009-1886

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Samba versions 3.2.0 through 3.2.12

Description: The issue is related to multiple format string vulnerabilities in the client/client.c file of smbclient. These vulnerabilities might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.

Recommendations: For Samba versions 3.2.0 through 3.2.12, update to a version outside of this range to mitigate the risk of exploitation.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-1886

DSA-1823-1

ECHO-D41B-B5A4-6D7C

OPENSUSE-SU-2024:10069-1

OPENSUSE-SU-2024:10334-1

Produtos afetados

Samba

Referências · 79

• 🔥 https://exploit-db.com/exploits/33053 · Exploit
• https://suse.com/security/cve/CVE-2015-5370 · Nota
• https://suse.com/security/cve/CVE-2009-2813 · Nota
• https://suse.com/security/cve/CVE-2009-2948 · Nota
• https://suse.com/security/cve/CVE-2013-4408 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2009:196 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-0870 · Nota
• https://suse.com/security/cve/CVE-2014-3560 · Nota
• https://suse.com/security/cve/CVE-2013-0214 · Nota
• https://suse.com/security/cve/CVE-2011-0719 · Nota
• https://suse.com/security/cve/CVE-2016-2115 · Nota
• http://secunia.com/advisories/35606 · Nota
• https://suse.com/security/cve/CVE-2015-5299 · Nota
• https://suse.com/security/cve/CVE-2013-1863 · Nota