CVE-2008-3789

published 2008-08-27

CVE-2008-3789: Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of…

Priority P4 4 low 2.1 CVSS 2.0

AV L AC L Au N C N I P A N

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	samba	< samba 2:3.2.3-1 (bookworm)	samba 2:3.2.3-1 (bookworm)
samba	samba	>= 0 < 2:3.2.3-1	2:3.2.3-1
samba	samba	>= 0 < 2:3.2.3-1	2:3.2.3-1
samba	samba	>= 0 < 2:3.2.3-1	2:3.2.3-1
samba	samba	>= 0 < 2:3.2.3-1	2:3.2.3-1
samba	samba	>= 3.2.0 < 3.2.3	3.2.3

CVSS provenance

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:N/I:P/A:N

osv 2.1 LOW

vendor_debian 2.1 MEDIUM

vendor_redhat 2.1 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-732