Upstream information

CVE-2008-3789 at MITRE

Description

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 2.1
Vector AV:L/AC:L/Au:N/C:N/I:P/A:N
Access Vector Local
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact Partial
Availability Impact None
SUSE Bugzilla entry: 420634 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Server 11 SP1
  • cifs-mount >= 3.4.3-1.17.2
  • ldapsmb >= 1.34b-11.17.2
  • libsmbclient0 >= 3.4.3-1.17.2
  • libsmbclient0-32bit >= 3.4.3-1.17.2
  • libsmbclient0-x86 >= 3.4.3-1.17.2
  • libtalloc1 >= 3.4.3-1.17.2
  • libtalloc1-32bit >= 3.4.3-1.17.2
  • libtalloc1-x86 >= 3.4.3-1.17.2
  • libtdb1 >= 3.4.3-1.17.2
  • libtdb1-32bit >= 3.4.3-1.17.2
  • libtdb1-x86 >= 3.4.3-1.17.2
  • libwbclient0 >= 3.4.3-1.17.2
  • libwbclient0-32bit >= 3.4.3-1.17.2
  • libwbclient0-x86 >= 3.4.3-1.17.2
  • samba >= 3.4.3-1.17.2
  • samba-32bit >= 3.4.3-1.17.2
  • samba-client >= 3.4.3-1.17.2
  • samba-client-32bit >= 3.4.3-1.17.2
  • samba-client-x86 >= 3.4.3-1.17.2
  • samba-krb-printing >= 3.4.3-1.17.2
  • samba-winbind >= 3.4.3-1.17.2
  • samba-winbind-32bit >= 3.4.3-1.17.2
  • samba-winbind-x86 >= 3.4.3-1.17.2
  • samba-x86 >= 3.4.3-1.17.2
Patchnames:
SUSE Linux Enterprise Server 11 SP1 GA cifs-mount
SUSE Linux Enterprise Server 11 SP2
  • cifs-utils >= 5.1-0.4.9
  • ldapsmb >= 1.34b-12.18.3
  • libldb1 >= 3.6.3-0.18.3
  • libsmbclient0 >= 3.6.3-0.18.3
  • libsmbclient0-32bit >= 3.6.3-0.18.3
  • libsmbclient0-x86 >= 3.6.3-0.18.3
  • libtalloc2 >= 3.6.3-0.18.3
  • libtalloc2-32bit >= 3.6.3-0.18.3
  • libtalloc2-x86 >= 3.6.3-0.18.3
  • libtdb1 >= 3.6.3-0.18.3
  • libtdb1-32bit >= 3.6.3-0.18.3
  • libtdb1-x86 >= 3.6.3-0.18.3
  • libtevent0 >= 3.6.3-0.18.3
  • libwbclient0 >= 3.6.3-0.18.3
  • libwbclient0-32bit >= 3.6.3-0.18.3
  • libwbclient0-x86 >= 3.6.3-0.18.3
  • samba >= 3.6.3-0.18.3
  • samba-32bit >= 3.6.3-0.18.3
  • samba-client >= 3.6.3-0.18.3
  • samba-client-32bit >= 3.6.3-0.18.3
  • samba-client-x86 >= 3.6.3-0.18.3
  • samba-krb-printing >= 3.6.3-0.18.3
  • samba-winbind >= 3.6.3-0.18.3
  • samba-winbind-32bit >= 3.6.3-0.18.3
  • samba-winbind-x86 >= 3.6.3-0.18.3
  • samba-x86 >= 3.6.3-0.18.3
Patchnames:
SUSE Linux Enterprise Server 11 SP2 GA cifs-utils
SUSE Linux Enterprise Server 11 SP2 GA ldapsmb
SUSE Linux Enterprise Server 11 SP3
  • cifs-utils >= 5.1-0.11.1
  • ldapsmb >= 1.34b-12.39.1
  • libldb1 >= 3.6.3-0.39.1
  • libsmbclient0 >= 3.6.3-0.39.1
  • libsmbclient0-32bit >= 3.6.3-0.39.1
  • libsmbclient0-x86 >= 3.6.3-0.39.1
  • libtalloc2 >= 3.6.3-0.39.1
  • libtalloc2-32bit >= 3.6.3-0.39.1
  • libtalloc2-x86 >= 3.6.3-0.39.1
  • libtdb1 >= 3.6.3-0.39.1
  • libtdb1-32bit >= 3.6.3-0.39.1
  • libtdb1-x86 >= 3.6.3-0.39.1
  • libtevent0 >= 3.6.3-0.39.1
  • libwbclient0 >= 3.6.3-0.39.1
  • libwbclient0-32bit >= 3.6.3-0.39.1
  • libwbclient0-x86 >= 3.6.3-0.39.1
  • samba >= 3.6.3-0.39.1
  • samba-32bit >= 3.6.3-0.39.1
  • samba-client >= 3.6.3-0.39.1
  • samba-client-32bit >= 3.6.3-0.39.1
  • samba-client-x86 >= 3.6.3-0.39.1
  • samba-krb-printing >= 3.6.3-0.39.1
  • samba-winbind >= 3.6.3-0.39.1
  • samba-winbind-32bit >= 3.6.3-0.39.1
  • samba-winbind-x86 >= 3.6.3-0.39.1
  • samba-x86 >= 3.6.3-0.39.1
Patchnames:
SUSE Linux Enterprise Server 11 SP3 GA cifs-utils
SUSE Linux Enterprise Server 11 SP3 GA ldapsmb
SUSE Linux Enterprise Server 11 SP4
  • cifs-utils >= 5.1-0.14.46
  • ldapsmb >= 1.34b-12.58.1
  • libldb1 >= 3.6.3-0.58.1
  • libsmbclient0 >= 3.6.3-0.58.1
  • libsmbclient0-32bit >= 3.6.3-0.58.1
  • libsmbclient0-x86 >= 3.6.3-0.58.1
  • libtalloc2 >= 3.6.3-0.58.1
  • libtalloc2-32bit >= 3.6.3-0.58.1
  • libtalloc2-x86 >= 3.6.3-0.58.1
  • libtdb1 >= 3.6.3-0.58.1
  • libtdb1-32bit >= 3.6.3-0.58.1
  • libtdb1-x86 >= 3.6.3-0.58.1
  • libtevent0 >= 3.6.3-0.58.1
  • libtevent0-32bit >= 3.6.3-0.58.1
  • libtevent0-x86 >= 3.6.3-0.39.1
  • libwbclient0 >= 3.6.3-0.58.1
  • libwbclient0-32bit >= 3.6.3-0.58.1
  • libwbclient0-x86 >= 3.6.3-0.58.1
  • samba >= 3.6.3-0.58.1
  • samba-32bit >= 3.6.3-0.58.1
  • samba-client >= 3.6.3-0.58.1
  • samba-client-32bit >= 3.6.3-0.58.1
  • samba-client-x86 >= 3.6.3-0.58.1
  • samba-krb-printing >= 3.6.3-0.58.1
  • samba-winbind >= 3.6.3-0.58.1
  • samba-winbind-32bit >= 3.6.3-0.58.1
  • samba-winbind-x86 >= 3.6.3-0.58.1
  • samba-x86 >= 3.6.3-0.58.1
Patchnames:
SUSE Linux Enterprise Server 11 SP4 GA cifs-utils
SUSE Linux Enterprise Server 11 SP4 GA ldapsmb
SUSE Linux Enterprise Server 11 SP4 GA libtevent0-x86
SUSE Linux Enterprise Software Development Kit 11 SP4
  • libldb-devel >= 3.6.3-0.58.1
  • libnetapi-devel >= 3.6.3-0.58.1
  • libnetapi0 >= 3.6.3-0.58.1
  • libsmbclient-devel >= 3.6.3-0.58.1
  • libsmbsharemodes-devel >= 3.6.3-0.58.1
  • libsmbsharemodes0 >= 3.6.3-0.58.1
  • libtalloc-devel >= 3.6.3-0.58.1
  • libtdb-devel >= 3.6.3-0.58.1
  • libtevent-devel >= 3.6.3-0.58.1
  • libwbclient-devel >= 3.6.3-0.58.1
  • samba-devel >= 3.6.3-0.58.1
  • samba-test >= 3.6.3-0.58.1
Patchnames:
SUSE Linux Enterprise Software Development Kit 11 SP4 GA libldb-devel
openSUSE 11.0
  • samba-debuginfo >= 3.2.3-0.1
openSUSE 11.0
  • cifs-mount >= 3.2.3-0.1
  • ldapsmb >= 1.34b-195.4
  • libnetapi-devel >= 3.2.3-0.1
  • libnetapi0 >= 3.2.3-0.1
  • libsmbclient-devel >= 3.2.3-0.1
  • libsmbclient0 >= 3.2.3-0.1
  • libsmbclient0-32bit >= 3.2.3-0.1
  • libsmbclient0-64bit >= 3.2.3-0.1
  • libsmbsharemodes-devel >= 3.2.3-0.1
  • libsmbsharemodes0 >= 3.2.3-0.1
  • libtalloc-devel >= 3.2.3-0.1
  • libtalloc1 >= 3.2.3-0.1
  • libtalloc1-32bit >= 3.2.3-0.1
  • libtalloc1-64bit >= 3.2.3-0.1
  • libtdb-devel >= 3.2.3-0.1
  • libtdb1 >= 3.2.3-0.1
  • libtdb1-32bit >= 3.2.3-0.1
  • libtdb1-64bit >= 3.2.3-0.1
  • libwbclient-devel >= 3.2.3-0.1
  • libwbclient0 >= 3.2.3-0.1
  • libwbclient0-32bit >= 3.2.3-0.1
  • libwbclient0-64bit >= 3.2.3-0.1
  • samba >= 3.2.3-0.1
  • samba-32bit >= 3.2.3-0.1
  • samba-64bit >= 3.2.3-0.1
  • samba-client >= 3.2.3-0.1
  • samba-client-32bit >= 3.2.3-0.1
  • samba-client-64bit >= 3.2.3-0.1
  • samba-devel >= 3.2.3-0.1
  • samba-doc >= 3.2.3-0.1
  • samba-krb-printing >= 3.2.3-0.1
  • samba-winbind >= 3.2.3-0.1
  • samba-winbind-32bit >= 3.2.3-0.1
  • samba-winbind-64bit >= 3.2.3-0.1