samba: wrong permissions of group

Package(s):

samba

CVE #(s):

CVE-2008-3789

Created:

September 5, 2008

Updated:

January 8, 2009

Description:

From the samba advisory: The file group_mapping.ldb is created with the permissions 0666. That means everyone is able to edit this file and gain additional access rights while connecting remotely to the Samba server. By manipulating the SID mappings contained in this file, it is also possible to establish a connection that runs in the privileged root context.

Alerts:

Fedora	FEDORA-2008-10518	2008-12-02
Fedora	FEDORA-2009-0268	2009-01-07
Fedora	FEDORA-2008-7243	2008-09-05

(Log in to post comments)

samba: wrong permissions of group_mapping.ldb