CVE-2009-1886

Summary

CVE	CVE-2009-1886
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2009-06-25 01:30:01 UTC
Updated	2026-04-23 00:35:47 UTC
Description	Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.

Risk And Classification

Primary CVSS: v2.0 9.3 from [email protected]

AV:N/AC:M/Au:N/C:C/I:C/A:C

Problem Types: CWE-134 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

AV:N/AC:M/Au:N/C:C/I:C/A:C

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Samba	Samba	3.2.0	All	All	All
Application	Samba	Samba	3.2.1	All	All	All
Application	Samba	Samba	3.2.10	All	All	All
Application	Samba	Samba	3.2.11	All	All	All
Application	Samba	Samba	3.2.12	All	All	All
Application	Samba	Samba	3.2.2	All	All	All
Application	Samba	Samba	3.2.3	All	All	All
Application	Samba	Samba	3.2.4	All	All	All
Application	Samba	Samba	3.2.5	All	All	All
Application	Samba	Samba	3.2.6	All	All	All
Application	Samba	Samba	3.2.7	All	All	All
Application	Samba	Samba	3.2.8	All	All	All
Application	Samba	Samba	3.2.9	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
Samba Format String And Security Bypass Vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Patch
The Slackware Linux Project: Slackware Security Advisories	af854a3a-2127-422b-91ae-364da2661108	www.slackware.com
SecurityTracker.com Archives - Samba smbclient Format String Bug May Let Users Execute Arbitrary Code	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com
www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch	af854a3a-2127-422b-91ae-364da2661108	www.samba.org	Patch, Vendor Advisory
USN-839-1: Samba vulnerabilities \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	www.ubuntu.com
Samba - Security Announcement Archive	af854a3a-2127-422b-91ae-364da2661108	www.samba.org	Patch, Vendor Advisory
Samba Security Bypass and Format String Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Vendor Advisory
Support / Security / Advisories / / MDVSA-2009:196 \| Mandriva	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com
Ubuntu update for samba - Secunia Advisories - Vulnerability Information - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com
Debian -- Security Information -- DSA-1823-1 samba	af854a3a-2127-422b-91ae-364da2661108	www.debian.org
Slackware update for samba - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	af854a3a-2127-422b-91ae-364da2661108	www.vupen.com	Patch, Vendor Advisory
IBM X-Force Exchange	af854a3a-2127-422b-91ae-364da2661108	exchange.xforce.ibmcloud.com
Debian update for samba - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com
6478 – smbclient interpolates % character in remote file name; CVE-2009-1886	af854a3a-2127-422b-91ae-364da2661108	bugzilla.samba.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Organization	Published	Contributor	Statement
Red Hat	2009-06-29	Tomas Hoger	Not vulnerable. This issue did not affect the versions of samba as shipped with Red Hat Enterprise Linux 3, 4, or 5.

There are currently no legacy QID mappings associated with this CVE.