oss-security - CVE Request (samba)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1219742248.3367.20.camel@dhcp-lab-164.englab.brq.redhat.com>
Date: Tue, 26 Aug 2008 11:17:28 +0200
From: Jan Lieskovsky <jlieskov@...hat.com>
To: coley@...re.org
Cc: oss-security@...ts.openwall.com
Subject: CVE Request (samba)

Hello Steve,

  Sascha Herrmann has noticed a file access permissions 
change, present by one of the critical TBD files,
shipped within the Samba product (group_mapping.{tdb,ldb},
mask changed from 0600 to 0666). As this file is of 
critical importance for proper function of the Samba tool,
it should not allow read and write access for the group
and for others. 

Affected Samba versions: 3.2.0-* +
========================

Current behavior: (samba-3.2.0-2.17)
====================================

# ls -l group_mapping.ldb
-rw-rw-rw- 1 root root 77824 2008-08-25 10:56 group_mapping.ldb

Expected behavior (present in all prior Samba versions): 
========================================================

# ls -l /var/lib/samba/group_mapping.tdb
-rw------- 1 root root 4096 2008-08-25 11:21 /var/lib/samba/group_mapping.tdb

Public mention of this report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496073
=============================

For the reference and explanation of meaning of Samba *.TBD files, please see:
==============================================================================

http://wiki.samba.org/index.php/Frequently_Asked_Questions
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/msdfs.html

Could you please allocate a CVE id for this issue?

Thank you in advance.

Kind regards
Jan iankko Lieskovsky
RH Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.