3 ms·
Read the disclosures. It's not SMB. It's nothing to do with SMB. It's your AD-DC that is at risk here.
by jra_samba 11y ago
Read the disclosures. It's not SMB. It's nothing to do with SMB. It's your AD-DC that is at risk here.
- tptacek 11y agoIt's not SMB, but it's all DCE RPC, right?
- jra_samba 11y agoYes that's correct. But DCE RPC is used for control of all AD-DC instances. That's why it's rated important.
- orf 11y agoI have, and I didn't say it had anything to do with it. The point is it's hardly a heartbleed or even a shellshock. Having samba accessible from the public internet is a issue in itself, regardless of this exploit. The MITM is dangerous I guess, but it's a MITM. It's bad, but not super-hypetrain mega-branding bad. It's not colleagues talking about it at lunch bad. Plus all the shady stuff other people have commented on here. Edit: having re-read the release ok, yeah, it's pretty bad. I still think you overdid it on the release though.
- jra_samba 11y agoI can't disagree. But I (and the Samba Team) didn't create the website or do the hype.