Samba Exploit Discovered, Fixed

An anonymous reader submits: "Digital Defense reported a remote root vulnerability in Samba that has existed in Samba source code for over 8 years. If it hadn't been caught from a wild packet capture, who knows how many more years it might have gone on. Fixes for this, and at least three other vulnerabilities have been fixed today. This is a serious threat to many thousands of people.. Did you plan to spend your Monday upgrading to Samba 2.2.8a?" elijahao supplies some more information: "All stable versions are affected (2.x), but the 3.0 series is not. Here is a link to the News page. Check out a mirror near you to get the Source or Security patches from 2.2.7a, 2.2.8, or 2.0.10."

Comments

/.'d

[kryptkpr]

3 posts and the website is dead already...ugh..

Don't worry guys!

[I Am The Owl]

It's open source! Many eyes make all bug shallow! See, it's only been in there for eight years!

I thought OSS was secure?

[kevlar]

This root level vulnerability has been in every SAMBA distro since its conception... 8 yrs and nobody has found it?