Open-source security shines in Samba case

Thursday, 24 April 2003, 12:15 AM EST

Recently discovered security holes in Samba were serious threats to companies using the popular freeware, which enables end users to access and use files, printers and other commonly shared resources on a company's network or via the Internet.

But they also demonstrated how the code-review process among those in the open-source community can ferret out vulnerabilities and how developers have adopted a new mindset, one in which secure coding is often seen as paramount over features and functionality.

Security holes in open-source applications and systems have been making news in the last 12 months, with highly publicized flubs in Sendmail, Snort, Apache and PHP grabbing headlines. Samba joined that group with separate security warnings on March 14 and April 7. The first warned of a flaw in Samba's main SMBD code which could allow an external attacker to remotely and anonymously gain root privileges on a server running a Samba server. SMBD is the server daemon that provides file-sharing and printing services to Windows clients. The second was a buffer overflow flaw that could also enable an attacker to remotely hijack a Samba server.

[ Read more ]




Spotlight

USBdriveby: Compromising computers with a $20 microcontroller

Posted on 19 December 2014.  |  Security researcher Samy Kamkar has devised a fast and easy way to compromise an unlocked computer and open a backdoor on it: a simple and cheap ($20) pre-programmed Teensy microcontroller.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Dec 19th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //