# # New Samba exploit
APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

New Samba exploit

I've removed advertising from most of this site and will eventually clean up the few pages where it remains.

While not terribly expensive to maintain, this does cost me something. If I don't get enough donations to cover that expense, I will be shutting the site down in early 2020.

If you found something useful today, please consider a small donation.



Some material is very old and may be incorrect today

© December 2004 Tony Lawrence
Referencing: Integer overflow could lead to remote code execution in Samba 2.x, 3.0.x

Patches from Samba Patch Site.

This of course does require access to a share to begin with, and not too many folks expose shares to the big bad world. However, this could allow someone who had gained internal access through hacking a non-admin account to escalate their privilege and get root access to the Samba server, so it's important to patch this one.

It never ends, does it? And it is particularly galling to we Unixy folks because the only reason we have any Samba running at all is because we need it for the darn Microsoft machines. I think it's a fair observation that NFS wasn't much used in smaller Unix systems, but Network Neighborhood is everywhere.

It all goes back to "making it easy". The easier you make it for the users, the more places where a mistake like this can bite you.

Oh well, patch and get on with it, right?


If you found something useful today, please consider a small donation.



Got something to add? Send me email.





(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

->
-> New Samba exploit


Inexpensive and informative Apple related e-books:

Take control of Apple TV, Second Edition

iOS 8: A Take Control Crash Course

Take Control of Preview

Photos: A Take Control Crash Course

Take Control of iCloud





More Articles by © Tony Lawrence





Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us


Printer Friendly Version





Technology is both a tool for helping humans and for destroying them. This is the paradox of our times which we're compelled to face. (Frank Herbert)




Linux posts

Troubleshooting posts


This post tagged:

Samba

Security



Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode