CVE-2009-1888: The acl_group_override function in smbd/posix_acls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x...

Security readout for executives and security teams

This vulnerability affects older Samba file servers. If a specific compatibility setting, dos filemode, is enabled, a remote user may be able to change file access control lists they should not control. That can weaken file permissions on shared data. Exposure is most likely on legacy Samba servers running affected 3.x releases with smbd reachable over the network and dos filemode enabled. Modern patched distributions or systems without that setting are less likely to be affected. Treat as a legacy infrastructure cleanup item with business impact tied to shared file integrity and access control. Prioritize remediation where old Samba servers handle sensitive data or broad internal shares. Mitigation focus: Upgrade Samba to a fixed vendor-supported package or fixed upstream release.; Use Samba 3.0.35, 3.2.13, 3.3.6, or later where applicable.; Review vendor advisories for distribution-specific fixed package versions..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.