3 ms·
This is the first DCE RPC protocol level vulnerability I'm aware of. DCE RPC isn't the web, but millions of businesses depend on it (mostly unknowingly) to do a
by jra_samba 11y ago
This is the first DCE RPC protocol level vulnerability I'm aware of. DCE RPC isn't the web, but millions of businesses depend on it (mostly unknowingly) to do admin on their local networks every day.
Not trying to mitigate someone else's hype, but from the Samba point of view this is one of the most serious bugs we've ever had to fix I think. We've had worse bugs that only affected Samba (root-level compromises, shudder), but the effect of this one is the most widespread.
- tptacek 11y agoI'm not writing this to be argumentative, but to get a better idea of what you mean by "protocol level vulnerability". Do you mean, "vulnerability intrinsic in the DCE RPC protocol, and not in the application layer functionality on top of it"? Because, didn't the Welchia worm target DCE RPC?
- jra_samba 11y agoI mean intrinsic to the "bind" authentication part of the DCE RPC protocol. Because the connection level part of that isn't integrity protected then any mitm can downgrade it.