Home

New Critical Samba Security Patch

Tue, 04/08/2003 - 10:06 — kebernet

CNet coverage linked:

"If it was related to the previous flaw, we would have found it when we audited the code," said Jeremy Allison, co-author of Samba and a leader of the Samba Team. "This has been in the code for seven or eight years."

Samba.org seems unavailable right now. Hope that isn't a sign of pwnage.   com.news.com.com/~com/com/news/com

Comments

Tue, 04/08/2003 - 10:19 — atrox (not verified)

Re: New Critical Samba Security Patch

This is a serious issue, dont get me wrong here, but Samba is not a service that you would generally put on a publix network (ie Internet) so most machines should not be affected by this.

Even if you use Samba, which I do, I use it a ton, its not a good idea in general to leave it exposed to the outside.

Yes there may be very special cases where people transfer files across it on the Internet, but that should be RARE. Use something more secure in general like scp or sftp, or a vpn tunnel if you must transfer files.

You still need to patch to protect your internal network of course, but that should be MUCH less risk than public access.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.