PT-2008-5148 · Samba · Samba

Published 2008-08-27 · Updated 2024-06-15 · CVE-2008-3789

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Samba version 3.2.0

Description The issue concerns weak permissions used by Samba for certain files, specifically group mapping.tdb and group mapping.ldb, which are set to 0666. This setting allows local users to modify the membership of Unix groups.

Recommendations For Samba version 3.2.0, consider changing the permissions of the group mapping.tdb and group mapping.ldb files to prevent local users from modifying Unix group memberships.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2008-3789

DTSA-161-1

ECHO-00A7-2E30-88C4

OPENSUSE-SU-2024:10683-1

OPENSUSE-SU-2024:11365-1

Affected Products

Samba

References · 82

• https://security-tracker.debian.org/tracker/CVE-2008-3789 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-3789 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10683-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3789 · Security Note
• http://samba.org/samba/security/CVE-2008-3789.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3789 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11365-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2019-12436 · Note
• https://suse.com/security/cve/CVE-2018-16851 · Note
• http://openwall.com/lists/oss-security/2008/08/26/2 · Note
• https://suse.com/security/cve/CVE-2018-1050 · Note
• https://suse.com/security/cve/CVE-2021-20254 · Note
• https://suse.com/security/cve/CVE-2017-7494 · Note
• http://vupen.com/english/advisories/2008/2440 · Note
• https://suse.com/security/cve/CVE-2008-1105 · Note