Windows Remains Vulnerable To Serious 18-Year-Old SMB Security Flaw

Posted by samzenpus on Monday April 13, 2015 @08:40AM from the protect-ya-neck dept.

Mark Wilson writes A serious security hole leaves millions of Windows users open to attack, making it possible to extract encrypted credentials from a target machine. Researchers at Cylance say the problem affects "any Windows PC, tablet or server" (including Windows 10) and is a slight progression of the Redirect to SMB attack discovered by Aaron Spangler way back in 1997. Redirect to SMB is essentially a man-in-the-middle attack which involves taking control of a network connection. As the name suggests, victims are then redirected to a malicious SMB server which can extract usernames, domains and passwords. Cylance also reports that software from companies such as Adobe, Oracle and Symantec — including security and antivirus tools — are affected.

2 of 171 comments (clear)

Min score:

Reason:

Sort:

used devastatingly already by circletimessquare · 2015-04-13 08:56 · Score: 5, Interesting

apparently this is how sony got hacked

--
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
1. Re:used devastatingly already by fuzzyf · 2015-04-13 09:50 · Score: 5, Interesting
  
  Man in the middle using SMB share. That requires someone to be on the local network to begin with.
  Could be used after pivoting, but not as a first foothold attack.