CVE Feed

    Dashboard / CVE / CVE-2009-1886

    CVE-2009-1886

    Multiple format string vulnerabilities in client/client.c in smbclient in Samba 3.2.0 through 3.2.12 might allow context-dependent attackers to execute arbitrary code via format string specifiers in a filename.

    Published:Jun 23, 2009
    Last Modified:Apr 23, 2026
    EPS:Jun 24, 2009
    EPSS Score:0.24809
    CVSS Score:9.3

    Affected Products

    Vendor
    Samba
    Product
    Samba

    Exploits

    https://www.exploit-db.com/exploits/33053

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Related CVEs

    CVE-2026-58224 (CVSS 6.5) — A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validat…
    CVE-2026-58222 (CVSS 8.8) — A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Di…
    CVE-2026-58218 (CVSS 5.3) — A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to…
    CVE-2026-58216 (CVSS 5.3) — An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpas…
    CVE-2026-6949 (CVSS 7.5) — No description is available for this CVE.…
    CVE-2026-58221 (CVSS 8.8) — A flaw was found in Samba Active Directory Domain Controller (AD DC). Improper authorization checks allow an a…
    CVE-2026-15779 (CVSS 6.1) — A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's ho…
    CVE-2026-3238 (CVSS 7.5) — A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The W…
    CVE-2026-1933 (CVSS 7.1) — A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. D…
    CVE-2026-2340 (CVSS 6.5) — A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) pr…

    References

    http://secunia.com/advisories/35539
    http://secunia.com/advisories/35573
    http://secunia.com/advisories/35606
    http://secunia.com/advisories/36918
    http://www.debian.org/security/2009/dsa-1823
    http://www.mandriva.com/security/advisories?name=MDVSA-2009:196
    http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch
    http://www.samba.org/samba/security/CVE-2009-1886.html
    http://www.securityfocus.com/bid/35472
    http://www.securitytracker.com/id?1022441
    http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
    http://www.ubuntu.com/usn/USN-839-1
    http://www.vupen.com/english/advisories/2009/1664
    https://bugzilla.samba.org/show_bug.cgi?id=6478
    https://exchange.xforce.ibmcloud.com/vulnerabilities/51328
    http://secunia.com/advisories/35539
    http://secunia.com/advisories/35573
    http://secunia.com/advisories/35606
    http://secunia.com/advisories/36918
    http://www.debian.org/security/2009/dsa-1823
    http://www.mandriva.com/security/advisories?name=MDVSA-2009:196
    http://www.samba.org/samba/ftp/patches/security/samba-3.2.12-CVE-2009-1886.patch
    http://www.samba.org/samba/security/CVE-2009-1886.html
    http://www.securityfocus.com/bid/35472
    http://www.securitytracker.com/id?1022441
    http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.521591
    http://www.ubuntu.com/usn/USN-839-1
    http://www.vupen.com/english/advisories/2009/1664
    https://bugzilla.samba.org/show_bug.cgi?id=6478
    https://exchange.xforce.ibmcloud.com/vulnerabilities/51328

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High