Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw

ronjor · Mar 23, 2016

By Eduard Kovacs on March 23, 2016

Stefan Metzmacher, an employee of SerNet and member of the Samba Core Team, reported discovering a critical vulnerability that has been dubbed “Badlock.” Details of the issue will be disclosed on April 12 when Microsoft and Samba developers release patches. It’s worth noting that April 12 is the next Patch Tuesday, which means the Badlock fix will be released as part of Microsoft’s regular security updates.
Click to expand...

Minimalist · Apr 12, 2016

Badlock vulnerability falls flat against its hype

Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block (SMB) protocol that provides file and print services for Windows clients.
As it turns out, Badlock was hardly the remote code execution monster many anticipated. Instead, it’s a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services.
Click to expand...

https://threatpost.com/badlock-vulnerability-falls-flat-against-its-hype

ronjor · Apr 12, 2016

Microsoft Windows and Samba may allow spoofing of authenticated users ("Badlock")

Original Release date: 12 Apr 2016 | Last revised: 12 Apr 2016

Solution
Apply an update

Affected users of supported versions of Microsoft Windows should apply updates from Windows Update as soon as possible.
Click to expand...

http://www.kb.cert.org/vuls/id/813296

Log in or Sign up

Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Log in or Sign up

Microsoft, Samba Preparing Patch for Severe "Badlock" Flaw

ronjor Global Moderator

Minimalist Registered Member

ronjor Global Moderator

Useful Searches