T-024: Vulnerability in Server Message Block (SMB)


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-024: Vulnerability in Server Message Block (SMB)
# 1  
Old 11-13-2008
T-024: Vulnerability in Server Message Block (SMB)

A remote code execution vulnerability exists in the way that Microsoft Server Message Block (SMB) Protocol handles NTLM credentials when a user connects to an attacker's SMB server. This vulnerability allows an attacker to replay the user's credentials back to them and execute code in the context of the logged-on user. The risk is MEDIUM. If a user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Solaris

Cannot login to SMB Server/Authentication denied

Hello, I have problems seting up SMB server in Solaris 11.3. I had SMB working previously on Solaris 11 (updated to 11.3), but a bad harddisk crash forced me to install Solaris again from scratch and I cannot get it working properly. I have imported the previous zfs pool with share.smb set... (7 Replies)
Discussion started by: Zorken
7 Replies

2. Solaris

/network/smb/server goes into maintenance mode.

All I'm running an OpenSolaris system (Nexenta). When doing a svcs I see that/network/smb/server is in maintenance mode. I have run a clear on the service and restarted. I see the same service show online* for a bit but then, enters maintenance every time. In the service log I... (2 Replies)
Discussion started by: dcpatriot
2 Replies
Login or Register to Ask a Question
MOUNT_SMBFS(8)						    BSD System Manager's Manual 					    MOUNT_SMBFS(8)

NAME
mount_smbfs -- mounts a shared resource from an SMB file server SYNOPSIS
mount_smbfs [-I host] [-M cmode[/smode]] [-N] [-O cowner[:cgroup]/sowner[:sgroup]] [-R retrycount] [-T timeout] [-U user] [-W workgroup] [-d mode] [-f mode] [-g gid] [-h] [-n opt] [-u uid] //[workgroup;][user[password]@] server[/share] path DESCRIPTION
The mount_smbfs command mounts a share from a remote server using SMB/CIFS protocol. The options are: -I host Do not use NetBIOS name resolver and connect directly to host, which can be either a valid DNS name or an IP address. -M cmode[/smode] Assign access rights to the newly created connection. -N Do not ask for a password. At run time, mount_smbfs reads the ~/.nsmbrc file for additional configuration parameters and a password. If no password is found the mount_smbfs prompts for it. -O cowner[:cgroup]/sowner[:sgroup] Assign owner/group attributes to the newly created connection. -R retrycount How many retries should be done before the SMB requester decides to drop the connection. -T timeout Timeout in seconds for each request. -U user Specifies the user name to be used in the authentication request. -W workgroup Specifies the workgroup to be used in the authentication request. -f mode, -d mode Specify permissions that should be assigned to files and directories. The values must be specified as octal numbers. Default value for the file mode is taken from mount point, default value for the dir mode adds execute permission where the file mode gives read permission. Note that these permissions can differ from the rights granted by SMB server. -h Prints a help message, much like the SYNOPSIS above. -n opt Set opt option to affect file name lookups. opt can be one of the following: Value Meaning long No long names. Server supports only "8.3" format. -u uid, -g gid User id and group id assigned to files. The default is owner and group id from directory where the volume is mounted. //[workgroup;][user[password]@] server[/share] The mount_smbfs command will use server as the NetBIOS name of remote computer, user as the remote user name and share as the resource name on a remote server. Workgroup and/or password may be specified here. If user is omitted the logged in user id will be used. Omitting share is an error when mount_smbfs is run from the command line, otherwise a browsing dialogue is presented. path Path to mount point. FILES
~/.nsmbrc Keeps static parameters for connections and other information. See ./examples/dot.nsmbrc for details. EXAMPLES
The following illustrate how to connect to an SMB server SAMBA as user GUEST to mount PUBLIC: mount_smbfs -I samba.mydomain.com //guest@samba/public /smb/public BUGS
Please report bugs to Apple. AUTHORS
Boris Popov <bp@butya.kz>, <bp@freebsd.org> FreeBSD Mar 10, 2000 FreeBSD