Bug 460150 (CVE-2008-3789)

Summary:	CVE-2008-3789 samba: Group mapping information LDB file created with insecure permissions
Product:	[Other] Security Response	Reporter:	Jan Lieskovsky <jlieskov>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	gdeschner, ssorce
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-11-19 15:02:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jan Lieskovsky 2008-08-26 14:24:02 UTC

Samba starting from version samba-3.2.0-*+ initially creates and after
removal recreates its TBD group mapping file (/var/lib/samba/group_mapping.ldb)
with file access permissions of 0666. This could allow a local unprivileged
system user write to this Samba tool critical file and potentially cause
a denial of service.

References:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073
http://www.openwall.com/lists/oss-security/2008/08/26/3

Comment 1 Jan Lieskovsky 2008-08-26 14:28:29 UTC

This issue does not affect the versions of the Samba package as shipped with
Red Hat Enterprise Linux 2.1, 3, 4 and 5.

This issue affects only versions of the Samba package as shipped within
the Fedora release, starting from F9.

Comment 2 Tomas Hoger 2008-08-27 16:24:09 UTC

Upstream advisory:
http://www.samba.org/samba/security/CVE-2008-3789.html

Upstream patches:
http://www.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-1.patch
http://www.samba.org/samba/ftp/patches/security/samba-3.2.2-CVE-2008-3789-2.patch

Comment 3 Fedora Update System 2008-08-27 17:30:31 UTC

samba-3.2.3-0.20.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/samba-3.2.3-0.20.fc9

Comment 4 Fedora Update System 2008-09-05 12:17:46 UTC

samba-3.2.3-0.20.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 5 Fedora Update System 2008-09-10 06:55:01 UTC

samba-3.2.3-0.20.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.