GCVE - cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:*

part: a version: 1.9.18 update: *

Vendor	Samba (`e90b9146-231c-5d4c-abab-30ee379c95a2`)
Product	Samba (`19c5014a-3c29-57af-83eb-c04c4b75a29f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/samba-team/samba`	purl2cpe	2026-06-01 10:11:05.824733
`pkg:gitlab/samba-team/samba`	purl2cpe	2026-06-01 10:11:05.824734
`pkg:samba/samba`	purl2cpe	2026-06-01 10:11:05.824736

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2724`	vulnerable	2026-06-08 04:58:08.746781	Details available The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547. Published: 2011-09-06T16:00:00.000Z Updated: 2024-08-06T23:08:23.760Z Open on db.gcve.eu Reference links http://git.samba.org/?p=cifs-utils.git%3Ba=commit%3Bh=1e7a32924b22d1f786b6f490ce8590656f578f91 http://www.redhat.com/support/errata/RHSA-2011-1220.html https://bugzilla.redhat.com/show_bug.cgi?id=726691 http://secunia.com/advisories/45798 http://www.securitytracker.com/id?1025984	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0547`	vulnerable	2026-06-08 04:52:03.116261	Details available client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string. Published: 2010-02-04T18:00:00.000Z Updated: 2024-08-07T00:52:19.691Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2010/1062 http://secunia.com/advisories/39317 http://security.gentoo.org/glsa/glsa-201206-29.xml http://www.securityfocus.com/bid/38326 http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a065c177dfc8f968775593ba00dffafeebb2e054	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0829`	vulnerable	2026-06-08 04:47:51.566237	Details available smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2. Published: 2004-09-10T04:00:00.000Z Updated: 2024-08-08T00:31:47.846Z Open on db.gcve.eu Reference links http://seclists.org/lists/bugtraq/2004/Sep/0003.html http://www.trustix.org/errata/2004/0043 https://exchange.xforce.ibmcloud.com/vulnerabilities/17138 http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml http://samba.org/samba/history/samba-2.2.11.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1288`	vulnerable	2026-06-08 04:44:58.259338	Details available Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows local users to read and write files and possibly gain privileges via bugs in the program. Published: 2002-03-09T05:00:00.000Z Updated: 2024-08-01T17:11:02.749Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/1406 http://www.securityfocus.com/archive/1/11397 http://www.caldera.com/support/security/advisories/SA-1998.35.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.