All vulnerabilities

Servers and applications

CVE-2008-3789

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Severity: Low 2.1
Published: 27 Aug 2008
Last changed: 16 Jun 2026
Added to UpHeron: 1 Nov 2026
Fixed in: 3.2.3
Exploit chance: 0.5% in the next 30 daysHigher than 46% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness: Incorrect permissions on a critical resource (CWE-732)
Attack: Needs local access · No login needed
Attacker can: Change some data
CVSS vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Sources: NVD

Affected software

Software	Affected versions
SambaServers and applications · `cpe:a:samba:samba`	From 3.2.0 before 3.2.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2008-3789
CVE.org https://www.cve.org/CVERecord?id=CVE-2008-3789