3 ms·
Ok, that is scary enough. If Windows and Samba are both affected, it might be something to do with the SMB protocol itself. But is it also a critical issue if S
by shdon 11y ago
Ok, that is scary enough. If Windows and Samba are both affected, it might be something to do with the SMB protocol itself. But is it also a critical issue if SMB is not accessible from the outside world (i.e. LAN only)?
- Someone1234 11y ago> But is it also a critical issue if SMB is not accessible from the outside world (i.e. LAN only)? It can be. As we've seen with ransomware, it only takes a single user within the private network to expose everyone. If this somehow allowed a user to steal a token and elevate their permissions things like ransomware could become more effective/dangerous.
- matheweis 11y agoAccording to a deleted tweet by someone in the know; everyone on the LAN would be able to get admin rights. http://www.csoonline.com/article/3047221/techology-business/company-behind-the-badlock-disclosure-says-pre-patch-hype-is-good-for-business.html http://www.csoonline.com/article/3047221/techology-business/...