Samba Hit By 'Highly Critical' Vulnerability

sawky puck writes "Researchers at Secunia have flagged a 'highly critical' vulnerability in Samba, the widely deployed open-source software for networked file sharing and printing. Successful exploitation allows execution of arbitrary code by tricking a user into connecting to a malicious server (e.g. by clicking an 'smb://' link) or by sending specially crafted packets to an 'nmbd' server configured as a local or domain master browser. This issue affects both Samba client and server installations."

Oh jeez

[blackjackshellac]

I guess I better take all of my samba servers off the internet!

<snark/>

Vulnerability? And how!

[Applekid]

I sure know I have a highly critical vulnerability to a pretty Brazillian lady doing the Samba, eh gents?

Re:Oh jeez

[value_added]

I'll check them for you, free of charge... what did you say their IPs were? :)

My guess is that most of his servers are in the 10/8 or 192.168/16 ranges. Run an nmap scan on those netblocks and I'll bet you'll find something. While you're at it, be sure to check out 127.0.0.1 for any "hidden" servers.

Re:Oh jeez

[Anonymous Coward]

Hah! I've got you now, you idi

Re:buffer overrun ..

[kestasjk]

Is it technically possible to design a system that is immune to buffer overruns or, by default, fails safe, as in not allowing any old code to walk all over the address space.

Microsoft labs are working on a solution that'll work like this: "The program you are using wants to write 0x0a83d9ed to the stack at address 0x912dfe31. Confirm or Deny?"

Re:Already Patched

[BiggerIsBetter]

It's already been fixed and the Debian team should be sending a patched version of samba to their repos for downstream distros either last night or some time today.

Yeah, but how long before someone fixes that patch? 2 years?

Re:buffer overrun ..

[Anonymous Coward]

Is it technically possible to design a system that is immune to buffer overruns or, by default, fails safe, as in not allowing any old code to walk all over the address space.

Yes. It's called "OpenBSD".

Re:More M$ Vulnerabilities

[nog_lorp]

http://smithii.com/samba [smithii.com].