dcsimg
Linux Today: Linux News On Internet Time.




More on LinuxToday


CNET News: Security Firm Regrets Samba Disclosure

Apr 08, 2003, 17:00 (3 Talkback[s])
(Other stories by Patrick Gray)

[ Thanks to Jeremy Allison for this link. ]

"A security company has apologized for prematurely disclosing the code needed to take advantage of a serious vulnerability in Samba, the open-source program for sharing Windows files between Unix and Linux systems.

"Digital Defense came under fire from the Samba Team on Monday after it released the code with its advisory on the vulnerability. The code allows anyone who downloads it to completely compromise any Samba-based system.

"The Samba Team was furious. After tense discussions, San Antonio, Texas-based Digital Defense has published an apology for the foul-up. It asserts that management was not aware the security team was planning to release the exploit..."

Complete Story

Related Stories: