5 ms·
Does this mean that any server that uses Samba, windows or not, is vulnerable?
by malwarebytess 6y ago
Does this mean that any server that uses Samba, windows or not, is vulnerable?
- tcmb 6y agoLooks like it, there is also a security issue released for Ubuntu: https://usn.ubuntu.com/4510-1/ https://usn.ubuntu.com/4510-1/
- secabeen 6y agoOnly if you are running the Samba DC functionality, which is non-default. Also, you would have needed to specifically disable the protection that was added by Samba in 2018.
- deleted 6y ago[deleted]
- tialaramex 6y agoIf the server provides Domain Controller capability then yes, it implements NetLogon, Microsoft's NetLogon protocol is vulnerable to this attack by design and so Samba in that scenario is potentially vulnerable and has the same mitigation strategy that Microsoft applied. If it's not a Domain Controller then this is irrelevant.