SambaCry! Samba CVE-2017-7494 Remote Code Execution Vulnerability

by CIRT Team

28 May 2017

in Security Advisories & Alerts

No Comments

3124

Description: All versions of Samba from 3.5.0 onward are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Impact: Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

Mitigation: Security patch is available in Samba official site.

Reference URL’s: