Issues the date: 2008-08-27
Renewal date: 2008-08-28
Is affected the system:
Samba Samba 3.2.0
Description:
--------------------------------------------------------------------------------
CVE(CAN) ID: CVE-2008-3789
Samba is a set realizes SMB (Server Messages Block) the agreement, the cross platform to carry on the file sharing and the printing sharing service procedure.
Samba when document foundation establishment access authority has the crack, after deletes in /var/lib/samba group_mapping.tdb or the group_mapping.ldb document manually, samba will found this document and the jurisdiction establishment will be 0666, this permission visit system's random user will revise this document.
<* origin: Sascha Herrmann (sh_bugs@nttcable.de)
Link: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073
http://www.openwall.com/lists/oss-security/2008/08/26/2
*>
Suggested:
--------------------------------------------------------------------------------
Manufacturer patch:
Samba
-----
At present the manufacturer had already issued the promotion patch repairs this security problem, welcome to manufacturer main page downloading:
http://www.samba.org/
|