Samba Servers Vulnerable To Denial-Of-Service Attacks
The Samba Team released on Tuesday a patch to fix two flaws that could result in disruptions for networks using the widely installed Unix and Linux software.
Source: ZDNetThe two relatively minor flaws could crash or make unresponsive systems running version 3 of Samba, an open-source software package that allows Windows files and printers to be shared by Unix and Linux systems. The flaws, known as denial-of-service vulnerabilities, basically could be used to disconnect Samba servers from the network by either overrunning the computer's memory to such an extent that it cannot function or by sending a specially crafted network request that would crash the NetBIOS function. "We have not had any reports in the wild of these" flaws being used by attackers, said Gerald Carter, a member of the Samba Team.
0