Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade samba | Jul 30, 2024 | Aug 27, 2008 |
| Samba | — | Upgrade to Samba version 3.2.3 | Nov 13, 2013 | Aug 27, 2008 |
| Suse | — | Upgrade libsmbsharemodes0Upgrade samba-krb-printingUpgrade samba-winbind-32bitUpgrade libtalloc1-32bitUpgrade samba-dcerpcUpgrade cifs-utilsUpgrade samba-docUpgrade libsmbclient0Upgrade libnetapi-develUpgrade samba-ad-dcUpgrade libldb-develUpgrade samba-python3Upgrade samba-winbindUpgrade pam_cifscredsUpgrade libwbclient-develUpgrade libldb2Upgrade libtdb1Upgrade ctdb-pcp-pmdaUpgrade ldapsmbUpgrade libtdb1-32bitUpgrade libtdb-develUpgrade libwbclient0-32bitUpgrade samba-gpupdateUpgrade ctdbUpgrade libsmbclient0-32bitUpgrade sambaUpgrade libtalloc2-32bitUpgrade samba-clientUpgrade samba-ad-dc-libsUpgrade samba-x86Upgrade samba-toolUpgrade samba-libs-python3Upgrade samba-client-langUpgrade ldb-toolsUpgrade cifs-utils-develUpgrade libtdb1-x86Upgrade samba-winbind-libs-langUpgrade samba-develUpgrade samba-libsUpgrade wb-cifs-idmap-pluginUpgrade samba-winbind-x86Upgrade libtevent-develUpgrade libtalloc-develUpgrade python3-ldbUpgrade libtevent0-32bitUpgrade samba-32bitUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade libtalloc2Upgrade libtalloc1Upgrade libtalloc2-x86Upgrade samba-client-x86Upgrade libwbclient0-x86Upgrade samba-client-32bitUpgrade libsmbsharemodes-develUpgrade samba-dsdb-modulesUpgrade libtevent0Upgrade samba-winbind-libsUpgrade libtalloc1-x86Upgrade cifs-mountUpgrade libtevent0-x86Upgrade libsmbclient0-x86Upgrade samba-ldb-ldapUpgrade libldb1Upgrade libwbclient0Upgrade samba-testUpgrade libnetapi0 | Dec 12, 2013 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub