CVE-2008-3789
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb...
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
Exploit likelihood
What each source reports
NVD Score used
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
CVE-2008-3789- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-732
- Updated
- 2026-11-02
CVE List No score
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
CVE-2008-3789- Updated
- 2026-11-02
EUVDEUVD-2008-3775 No score
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
EUVD-2008-3775- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2x4j-x774-w5j9 No score
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb...
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
GHSA-2x4j-x774-w5j9- Weakness
- CWE-732
- Updated
- 2026-11-02
OSV No score
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
CVE-2008-3789- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-3789 No score
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.
- Record
DEBIAN-CVE-2008-3789- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10683-1 No score
cifs-utils-6.13-1.3 on GA media
These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10683-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11365-1 No score
ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media
These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11365-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.2.3-1 | 2:3.2.3-1 |
sambaDebian:13 |
before 2:3.2.3-1 | 2:3.2.3-1 |
sambaDebian:14 |
before 2:3.2.3-1 | 2:3.2.3-1 |
sambaDebian:5.0 |
before 2:3.2.1-1+lenny1 | 2:3.2.1-1+lenny1 |
cifs-utilsopenSUSE:Tumbleweed |
before 6.13-1.3 | 6.13-1.3 |
sambaopenSUSE:Tumbleweed |
before 4.14.6+git.182.2205d5224e3-1.1 | 4.14.6+git.182.2205d5224e3-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3789 is a low vulnerability (CVSS 2.1) in Samba, published August 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. Fixed in samba 2:3.2.3-1.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073
securityfocus.com/bid/30837
secunia.com/advisories/31601
securitytracker.com/id?1020770
exchange.xforce.ibmcloud.com/vulnerabilities/44678
vupen.com/english/advisories/2008/2440
Show 73 moreShow less
samba.org/samba/security/CVE-2008-3789.html
openwall.com/lists/oss-security/2008/08/26/2
nvd.nist.gov/vuln/detail/CVE-2008-3789
github.com/advisories/GHSA-2x4j-x774-w5j9
security-tracker.debian.org/tracker/CVE-2008-3789
suse.com/security/cve/CVE-2006-1059