website statistics

What is the next Gadget you want?

View Results

Loading ... Loading ...
1 Star2 Stars3 Stars4 Stars5 Stars (Rate This)
Loading ... Loading ...

It is interesting to note how some very crucial security vulnerabilities in software are found a little too late. For instance, Samba just announced that it has now patched a remote code execution exploit which was present in all versions of Samba between 3.0.x and 3.6.3. This essentially means that this vulnerability is at least five years old since Samba released the 3.0.25 version as back as 2007.


This remote code execution exploit would have enabled a potential attacker to execute code as ‘root’ user acting as one from some anonymous connection. Nonetheless, the good news are that the vulnerability has been found and patched by Samba.

The developers of Samba described this security flaw in the following words, ‘ The code generator for Samba’s remote procedure call (RPC) code contained an error which caused it to generate code containing a security flaw. This generated code is used in the parts of Samba that control marshalling and unmarshalling of RPC calls over the network. The flaw caused checks on the variable containing the length of an allocated array to be done independently from the checks on the variable used to allocate the memory for that array. As both these variables are controlled by the connecting client it makes it possible for a specially crafted RPC call to cause the server to execute arbitrary code.

As this does not require an authenticated connection it is the most serious vulnerability possible in a program, and users and vendors are encouraged to patch their Samba installations immediately.’

Samba has released three new security releases. These are for such versions of the software which are currently supported and you can find them here. Moreover, patches for older versions of Samba who have this exploit have also been made available here.

Buy Cheapest Related Product From Amazon.com


Smart Car Utilizes ASCII Art To Create Twitter Commercial

Now You Can Trade-In CDs At Amazon
You can also press the left/right arrow key on your keyboard to go to previous/next post
  On April 13, 2012(2 years, 0 months ago.)

Recent Search

Recent Tutorials

At the beginning level, many people don't know how to use Gmail properly. For them, a here's a helpful guideline.
Skype now allows you to call directly from your Outlook account. Find the step-by-step installation process from this tutorial.
This tutorial helps you quickly resolve four of the most common problems that occur with Windows XP.
After releasing Look Back, many people didn't like it. So Facebook planned to add an Edit tool to the feature and now you can edit your Facebook Look Back video.
Do you want to record Skype calls but don't know how to do that? Then this guide is absolutely for you. Get inside the article for details.
Do you know that many companies can track you on Facebook? Do you want to know who they are? Do you want to block them?
So you've been planning on replacing your old hard drive with the new drive? This tutorial helps you with a few simple steps.
Bitcoin is a digital currency that has gained extraordinary momentum in the last few months. This tutorial helps you get started with the basics.
Android lockscreen can be secured in a number of ways, some of which are described in this brief tutorial.
This review of iSkysoft Video Converter tells you everything you want to know about this Win 8/7 compatible video/DVD tool. Check the below to learn more details.
Close You Have To Login
User:
Pass:
Login With »Login With TwitterLogin With Facebook