CVE-2008-3789: Samba

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.

Affected products

• Samba Samba: from 3.2.0, before 3.2.3 (fixed in 3.2.3)

Published 2008-08-27. Last modified 2026-06-16.