PT-2009-4351 · Samba+1 · Samba+1

Jeremy Allison · Publicado 2009-06-24 · Atualizado 2024-06-15 · CVE-2009-1888

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Samba versions 3.0.x through 3.0.34 Samba versions 3.1.x through 3.2.12 Samba versions 3.3.x through 3.3.5

Description: The issue allows remote attackers to modify access control lists for files. This is related to read access to uninitialized memory when dos filemode is enabled.

Recommendations: For Samba versions 3.0.x through 3.0.34, update to version 3.0.35 or later. For Samba versions 3.1.x through 3.2.12, update to version 3.2.13 or later. For Samba versions 3.3.x through 3.3.5, update to version 3.3.6 or later.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1888

DSA-1823-1

ECHO-0C92-D457-D9F2

OPENSUSE-SU-2024:10069-1

OPENSUSE-SU-2024:10334-1

RHSA-2009:1529

RHSA-2009:1585

RHSA-2009_1529

Produtos afetados

Red Hat

Samba

Referências · 83

• 🔥 http://securityfocus.com/bid/35472 · Exploit
• 🔥 http://samba.org/samba/ftp/patches/security/samba-3.0.34-CVE-2009-1888.patch · Exploit
• https://suse.com/security/cve/CVE-2015-5370 · Nota
• https://suse.com/security/cve/CVE-2009-2813 · Nota
• https://suse.com/security/cve/CVE-2009-2948 · Nota
• https://suse.com/security/cve/CVE-2013-4408 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10069-1 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2009:196 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-0870 · Nota
• https://osv.dev/vulnerability/CVE-2009-1888 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3560 · Nota
• https://suse.com/security/cve/CVE-2013-0214 · Nota
• https://suse.com/security/cve/CVE-2011-0719 · Nota
• http://wiki.rpath.com/Advisories:rPSA-2009-0145 · Nota
• https://suse.com/security/cve/CVE-2016-2115 · Nota