Vulnerability in Samba (*nix Users)

[MysticGold04]

Was frequenting some of the websites I normally get my PC news from and came across this:

http://isc.sans.edu/diary.html?storyid=12955

 

[simple_gifts]

Thanks for that. The workaround described @ the samba site (hosts allow) is certainly a reasonable mitigation strategy for the short term. Most security conscious sites (like mine) already have an access list enumerated.

 

[uc50ic4more]

I have always, always used the hosts_allow file when setting up Samba *except* when I am using Ubuntu's GUI; in which case I never touch a config file. I am sure, though, that any and every distro worth their salt'll get a patch out soon.

Having said that, I am getting more and more friends, neighbours and family to switch over entire households to Linux, and it is much easier just to use SSH!