Upstream information
Description
Samba 3.2.0 uses weak permissions (0666) for the (1) group_mapping.tdb and (2) group_mapping.ldb files, which allows local users to modify the membership of Unix groups.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 2.1 |
Vector | AV:L/AC:L/Au:N/C:N/I:P/A:N |
Access Vector | Local |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | None |
Integrity Impact | Partial |
Availability Impact | None |
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 |
| Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA libldb-devel-3.6.3-0.58.1 |
SUSE Linux Enterprise Micro 6.0 |
| Patchnames: SUSE Linux Enterprise Micro 6.0 GA cifs-utils-7.0-2.9 SUSE Linux Enterprise Micro 6.0 GA samba-client-libs-4.19.4+git.339.acf1ccaa02-1.22 |
SUSE Linux Enterprise Micro 6.1 |
| Patchnames: SUSE Linux Enterprise Micro 6.1 GA cifs-utils-7.0-slfo.1.1_1.1 SUSE Linux Enterprise Micro 6.1 GA samba-client-libs-4.20.2+git.348.4fb6af61307-slfo.1.1_1.8 |
SUSE Linux Enterprise Server 11 SP1 |
| Patchnames: SUSE Linux Enterprise Server 11 SP1 GA cifs-mount-3.4.3-1.17.2 |
SUSE Linux Enterprise Server 11 SP2 |
| Patchnames: SUSE Linux Enterprise Server 11 SP2 GA cifs-utils-5.1-0.4.9 SUSE Linux Enterprise Server 11 SP2 GA ldapsmb-1.34b-12.18.3 |
SUSE Linux Enterprise Server 11 SP3 |
| Patchnames: SUSE Linux Enterprise Server 11 SP3 GA cifs-utils-5.1-0.11.1 SUSE Linux Enterprise Server 11 SP3 GA ldapsmb-1.34b-12.39.1 |
SUSE Linux Enterprise Server 11 SP4 |
| Patchnames: SUSE Linux Enterprise Server 11 SP4 GA cifs-utils-5.1-0.14.46 SUSE Linux Enterprise Server 11 SP4 GA ldapsmb-1.34b-12.58.1 SUSE Linux Enterprise Server 11 SP4 GA libtevent0-x86-3.6.3-0.39.1 SUSE Linux Enterprise Software Development Kit 11 SP4 GA libldb-devel-3.6.3-0.58.1 |
openSUSE Tumbleweed |
| Patchnames: openSUSE-Tumbleweed-2024-10683 openSUSE-Tumbleweed-2024-11365 |
SUSE Timeline for this CVE
CVE page created: Tue Jul 9 16:25:58 2013CVE page last modified: Sat Nov 23 13:13:31 2024