SoylentNews
SoylentNews is people
https://soylentnews.org/

An Anonymous Coward writes:

Hackernews reports:

A 7-year-old critical remote code execution vulnerability has been discovered in Samba networking software that could allow a remote attacker to take control of an affected Linux and Unix machines.

[...] The newly discovered remote code execution vulnerability (CVE-2017-7494) affects all versions newer than Samba 3.5.0 that was released on March 1, 2010.

"All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it," Samba wrote in an advisory published Wednesday.

Original Submission

1. "Hackernews reports" - http://thehackernews.com/2017/05/samba-rce-exploit.html
2. "CVE-2017-7494" - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-7494
3. "advisory" - https://www.samba.org/samba/security/CVE-2017-7494.html
4. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=20432

printed from SoylentNews, 7-Year-Old Samba Flaw Lets Hackers Access Thousands of Linux PCs Remotely on 2024-04-19 12:05:10