CVE-2009-1886

CVE-2009-1886 describes multiple format string vulnerabilities in the smbclient component of Samba versions 3.2.0 through 3.2.12. An attacker could exploit these flaws by crafting a malicious filename containing format string specifiers, potentially leading to arbitrary code execution. This vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry exists, and despite its high risk score, there is no evidence of active exploitation or significant community discussion or media coverage.