T-024: Vulnerability in Server Message Block (SMB)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-024: Vulnerability in Server Message Block (SMB)
# 1  
Old 11-13-2008
T-024: Vulnerability in Server Message Block (SMB)

A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol handles NTLM credentials when a user connects to an attacker's SMB server. This vulnerability allows an attacker to replay the user's credentials back to them and execute code in the context of the logged-on user. The risk is MEDIUM. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Solaris

Cannot login to SMB Server/Authentication denied

Hello, I have problems seting up SMB server in Solaris 11.3. I had SMB working previously on Solaris 11 (updated to 11.3), but a bad harddisk crash forced me to install Solaris again from scratch and I cannot get it working properly. I have imported the previous zfs pool with share.smb set... (7 Replies)
Discussion started by: Zorken
7 Replies

2. Solaris

/network/smb/server goes into maintenance mode.

All I'm running an OpenSolaris system (Nexenta). When doing a svcs I see that/network/smb/server is in maintenance mode. I have run a clear on the service and restarted. I see the same service show online* for a bit but then, enters maintenance every time. In the service log I... (2 Replies)
Discussion started by: dcpatriot
2 Replies
Login or Register to Ask a Question
MOUNT_SMBFS(8)						    BSD System Manager's Manual 					    MOUNT_SMBFS(8)

NAME
mount_smbfs -- mount a shared resource from an SMB file server SYNOPSIS
mount_smbfs [-N] [-o options] [-d mode] [-f mode] [-h] //[domain;][user[:password]@]server[/share] path DESCRIPTION
The mount_smbfs command mounts a share from a remote server using SMB/CIFS protocol. The options are as follows: -N Do not ask for a password. At run time, mount_smbfs reads the ~/Library/Preferences/nsmb.conf file for additional configuration parameters and a password. If no password is found, mount_smbfs prompts for it. -o Options passed to mount(2) are specified with the -o option followed by a comma separated string of options. See the mount(8) man page for possible options and their meanings. Additional options supported by the mount_smbfs are as follows: nobrowse Indicate to the Carbon subsystem that this volume is not to be displayed to the user. automounted Set flags on the mountpoint to indicate that the volume has been mounted by the automounter. nostreams Don't use NTFS Streams even if they are supported by the server. soft Make the mount soft. Fail file system calls after a number of seconds. nonotification Turn off using notifications for this volume. -f mode, -d mode Specify permissions that should be assigned to files and directories. The values must be specified as octal numbers. Default value for the file mode is taken from mount point, default value for the directory mode adds execute permission where the file mode gives read permission. Note that these permissions can differ from the rights granted by SMB server. -h Prints a help message, much like the SYNOPSIS above. //[domain;][user[password]@] server[/share] The mount_smbfs command will use server as the NetBIOS name of remote computer, user as the remote user name and share as the resource name on a remote server. Domain and/or password may be specified here. If user is omitted the logged in user id will be used. Omitting share is an error when mount_smbfs is run from the command line, otherwise a browsing dialogue is presented. path Path to mount point. FILES
nsmb.conf Keeps static parameters for connections and other information. See man nsmb.conf for details. EXAMPLES
This example shows the proper url to use to mount the share PUBLIC from the SMB server myserver : mkdir /smb/public mount -t smbfs //username:userpass@myserver/PUBLIC /smb/public This example shows the proper url to use to mount the share PUBLIC from the SMB server myserver as guest: mkdir /smb/public mount -t smbfs //guest:@myserver/PUBLIC /smb/public Note: You should always use the system mount command and never call mount_smbfs directly. SEE ALSO
mount(2), nsmb.conf(5), mount(8), umount(8) BUGS
Please report bugs to Apple. AUTHORS
Boris Popov <bp@butya.kz>, <bp@FreeBSD.org> FreeBSD March 10, 2000 FreeBSD