Samba’s “One Line Of Code” Exploit Could Make Linux Vulnerable To WannaCry-like Attack, Patch Now

Researchers have warned that Linux and Unix machines are affected by a Samba exploit that could allow an attacker to take control of the systems. This could open doors to attacks similar to WannaCry. The Samba team and developers have pushed patches to fix

the flaw.
Samba is a free software license under the GNU GPL license that’s widely used on Linux and Unix computers for making them work with Windows file and printing services. A security vulnerability in Samba could leave hundreds and thousands of computers open to attacks.

With ID CVE-2017-7494, the vulnerability has been described as remote code execution from a writable share. As per the description, this flaw could allow malicious users to upload and make the smdb server to execute a shared library from a writable share.

Nick Bilogorskiy of Cyphort says that there are no active exploits in the wild, but the damage from Samba vulnerability could be steep, according to TechTarget. This flaw affects Samba versions 3.5 and newer.

This is because the vulnerability can allow remote code execution and an attacker can gain full control over a computer. This flaw isn’t exactly new, but recent developments showed that it’s more serious than expected.

Having seen the wrath of WannaCry ransomware in recent weeks, comparisons between Samba flaw and WannaCry are unavoidable. The experts have outlined that like WannaCry, Samba flaw can be used as a conduit for a wormhole exploit for quick expansion.

It should also be noted that an exploit which uses Samba flaw would make use of the bugs in the same SMB protocol used by the WannaCry’s NSA tools.

Earlier this week, The Samba Team, a group of 40 developers, released the patch to address this vulnerability. Apart from that, adding the “nt pipe support = no” to smb.conf file and restarting the service mitigates the threat, writes Cisco in a security bulletin.

JTF discovers Benue militant leader’s armoury

MAKURDI—The Joint Military and Police Security Task Force in Katsina-Ala Local Government Area of Benue State, yesterday, recovered 10 cartons of high calibre explosives, rocket launchers and hundreds of live ammunition from Gbishe, the country home of wanted militia leader, Terwase Agwaza, alias Gana. Also recovered from Gbishe was a power motorbike belonging to Agwaza, military uniforms and helmet, handsets and two sacks of weeds, suspected to be Indian hemp.

Google Announces New Camera Called Google Clips

The core of the camera is AI engine which does the processing part and gets smarter over time. Clips can detect people and subjects using machine learning that happens on the system itself.

Ambode’s Michael Jackson syndrome

GOVERNOR Akinwunmi Ambode’s urban renewal policy is fundamentally flawed. For one, it strives to recast a Nigerian city in Parisian or Washingtonian mold. Secondly, it fails to realise that Lagos does not have to look like Paris, New York or Washington DC to be a beautiful, functional and livable city. A city is not just an agglomeration of buildings, streets and public spaces cobbled together by architectural, engineering and urban planning standards. A city captures, encapsulates and expresses the totality of a people’s way of life. Not surprisingly, Western European cities have a similar character, a character that is different from (for example) Asian cities.

Is The Legend of Zelda: Breath of the Wild the best-designed game ever?

You wake up, it’s dark and you’re lying in a pool. You don’t remember how you got here. You stand up, stretch your aching limbs, walk towards the exit and out into the brilliant sunshine. As your eyes adjust to the light, the world comes slowly into focus – and it is

9JABREEZELAND

Search This Blog