Linux Users Beware: Patch New Samba Flaw ‘Immediately’

“The bug in Samba versions 3.6.3 and previous versions is a
buffer overflow flaw in Samba’s remote procedure call code. “As
this does not require an authenticated connection it is the most
serious vulnerability possible in a program, and users and vendors
are encouraged to patch their Samba installations immediately,”
according to a newly issued advisory from Samba on the new
CVE-2012-1182 vulnerability, which includes links to patches for
the software.

“Nicholas Percoco, senior vice president and head of Trustwave
SpiderLabs, says the flaw affects anyone who has embedded
Linux-based appliances that use Samba for file sharing, such as
NASes, print servers, and printers. While these devices tend to run
in an intranet rather than over the big Internet, the main risk
would be from a sophisticated targeted attack or a malicious
insider, he says. “

Complete Story