CVE-2008-3789

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb...

2.1 LowFix available

CVE-2008-3789 is a low vulnerability (CVSS 2.1) in Samba, published August 27, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 46th percentile. Fixed in samba 2:3.2.3-1.

What does this mean?

Severity: 2.1 LowCVSS 2.0, NVD
Exploit chance: 0.55%EPSS, 46th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 2:3.2.3-1samba +5 more

Description

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Exploit likelihood

0.55%Down 0.6 points since Feb 4, 2022

Affected products

samba

Affected packages

Affected packages
Package	Affected	Fixed
`samba` Debian:12	before 2:3.2.3-1	2:3.2.3-1
`samba` Debian:13	before 2:3.2.3-1	2:3.2.3-1
`samba` Debian:14	before 2:3.2.3-1	2:3.2.3-1
`samba` Debian:5.0	before 2:3.2.1-1+lenny1	2:3.2.1-1+lenny1
`cifs-utils` openSUSE:Tumbleweed From an advisory covering 16 CVEs	before 6.13-1.3	6.13-1.3
`samba` openSUSE:Tumbleweed From an advisory covering 66 CVEs	before 4.14.6+git.182.2205d5224e3-1.1	4.14.6+git.182.2205d5224e3-1.1

What each source reports

NVD Score used2.1

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: CVE-2008-3789
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-732
Updated: 2026-11-02

CVE ListNo score

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: CVE-2008-3789
Updated: 2026-11-02

EUVDEUVD-2008-3775No score

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: EUVD-2008-3775
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2x4j-x774-w5j9No score

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb...

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: GHSA-2x4j-x774-w5j9
Weakness: CWE-732
Updated: 2026-11-02

OSVNo score

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: CVE-2008-3789
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-3789No score

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Record: DEBIAN-CVE-2008-3789
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10683-1No score

cifs-utils-6.13-1.3 on GA media

These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.