PT-2008-5148 · Samba · Samba

Publicado 2008-08-27 · Atualizado 2024-06-15 · CVE-2008-3789

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Samba version 3.2.0

Description The issue concerns weak permissions used by Samba for certain files, specifically group mapping.tdb and group mapping.ldb, which are set to 0666. This setting allows local users to modify the membership of Unix groups.

Recommendations For Samba version 3.2.0, consider changing the permissions of the group mapping.tdb and group mapping.ldb files to prevent local users from modifying Unix group memberships.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2008-3789

DTSA-161-1

ECHO-00A7-2E30-88C4

OPENSUSE-SU-2024:10683-1

OPENSUSE-SU-2024:11365-1

Produtos afetados

Samba

Referências · 82

• https://suse.com/security/cve/CVE-2019-12436 · Nota
• https://suse.com/security/cve/CVE-2018-16851 · Nota
• https://security-tracker.debian.org/tracker/CVE-2008-3789 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/08/26/2 · Nota
• https://suse.com/security/cve/CVE-2018-1050 · Nota
• https://suse.com/security/cve/CVE-2021-20254 · Nota
• https://suse.com/security/cve/CVE-2017-7494 · Nota
• http://vupen.com/english/advisories/2008/2440 · Nota
• https://suse.com/security/cve/CVE-2008-1105 · Nota
• https://suse.com/security/cve/CVE-2016-2125 · Nota
• https://suse.com/security/cve/CVE-2007-5398 · Nota
• https://suse.com/security/cve/CVE-2018-1140 · Nota
• https://suse.com/security/cve/CVE-2018-1057 · Nota
• https://suse.com/security/cve/CVE-2021-20277 · Nota
• https://suse.com/security/cve/CVE-2007-4572 · Nota