CVE-2008-3789

🗓️ 27 Aug 2008 20:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 89 Views🌐 WEB

Samba 3.2.0 weak file permissions allow local users to modify Unix group

Reporter	Title	Published	Views	Family All 41
Cvelist	CVE-2008-3789	27 Aug 200820:00	–	cvelist
Debian CVE	CVE-2008-3789	27 Aug 200820:00	–	debiancve
Oracle linux	samba security, bug fix, and enhancement update	18 Nov 202300:00	–	oraclelinux
EUVD	EUVD-2008-3775	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 9 Update: samba-3.2.3-0.20.fc9	10 Sep 200806:55	–	fedora
Fedora	[SECURITY] Fedora 9 Update: samba-3.2.3-0.20.fc9	5 Sep 200812:17	–	fedora
Fedora	[SECURITY] Fedora 9 Update: samba-3.2.7-0.23.fc9	7 Jan 200921:50	–	fedora
Fedora	[SECURITY] Fedora 9 Update: samba-3.2.5-0.22.fc9	3 Dec 200801:12	–	fedora
Tenable Nessus	Fedora 9 : samba-3.2.3-0.20.fc9 (2008-7243)	8 Sep 200800:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 6.06 : samba Multiple Vulnerabilities (NS-SA-2025-0208)	30 Sep 202500:00	–	nessus

NVD

Node

samba sambaRange3.2.0–3.2.3

Source	Link
secunia	www.secunia.com/advisories/31601
securityfocus	www.securityfocus.com/bid/30837
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
samba	www.samba.org/samba/security/CVE-2008-3789.html
openwall	www.openwall.com/lists/oss-security/2008/08/26/2
securitytracker	www.securitytracker.com/id
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/44678
vupen	www.vupen.com/english/advisories/2008/2440

Parameter	Position	Path	Description	CWE
group_mapping.tdb	path	/var/lib/samba/group_mapping.tdb	Samba stores group membership in group_mapping.tdb with weak 0666 permissions allowing local users to modify Unix group membership	CWE-732
group_mapping.ldb	path	/var/lib/samba/group_mapping.ldb	Samba stores group membership in group_mapping.ldb with weak 0666 permissions allowing local users to modify Unix group membership	CWE-732

16 Jun 2026 22:56Current

5.9Medium risk

Vulners AI Score5.9

CVSS 22.1

EPSS0.00528