Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [samba]

Samba is a free software re-implementation of the SMB/CIFS networking protocol.

0
votes
1answer
47 views

samba server exposed to wan

I recently realized that my samba server was exposed for about 3 years to the wan (ports opened and smbd was listening). I made a mistake when I configured my firewall and failed to check it. This ...
2
votes
0answers
273 views

Bypass of LDAP authentication

In an LDAP environment that has no Radius or SSO policy whatsoever I have been told from the corporate sysadmin that: Machines that are not included into the domain could access resources (SAMBA) ...
2
votes
3answers
563 views

How to externally backup a fully encrypted disk partition

For a kind of NAS/server running Ubuntu with SAMBA to host files for several Windows computers, I would like to encrypt the files on the server. I know I could do this for the partition using ZFS or ...
1
vote
0answers
63 views

Detecting Samba exploit attacks

I've been messing around with metasploitable two and Kali linux. I came across a tutorial that went over the exploit/multi/samba/usermap_script, I used the exploit and got a shell My question is how ...
5
votes
2answers
2k views

Reverse connection Metasploitable 2 -> Kali Linux (Samba 3.x) without Metasploit

I am trying to exploit Metasploitable 2 without the use of Metasploit, with the aim of learning. In this case, I am focusing on Samba 3.x (Port TCP 139, 445) In this link http://www.rwbnetsec.com/...
1
vote
0answers
389 views

SMB/CIFS security in heterogeneous environment

Suppose I have several machines both Linux and Windows I want to connect to each other for file-sharing. Now I use mount -cifs command with vers=3.0 clause to access Windows shares from my Linux ...
5
votes
0answers
938 views

Metasploit DCERPC BindError

I'm trying to gain shell access to my home router/gateway, so I decided to use metasploit and nmap to find if there were any vulnerabilities that I could use: [marcel@GLaDOS ~]$ sudo nmap -sS -Pn -A ...
1
vote
1answer
147 views

Changing Structure of SAM database to disable LM usage

SAM database normally holds LM and NTLM hashes of local computer. Recently we applied configurations for disabling NTLMv1 usage in enterprise network . After that we mitigated LM hash usage on SMB ...
4
votes
1answer
3k views

How does the CVE-2017-7494 “SambaCry” exploit work?

According to media reports, an attacker can upload a library to a Samba share and then open a named pipe whose name equals the local path to the uploaded library to remotely execute the code ...
4
votes
1answer
209 views

What makes me vulnerable to CVE-2017-7494?

I do understand that basically all Versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability. And there is even PoC Code to check if a specific server is vulnerable ...
4
votes
4answers
1k views

CVE-2017-7494 Samba remote call. How do I know if Samba is running or not on my Ubuntu server?

My servers are Ubuntu. I want to know whether Samba is installed accidentally or not. Is the following command correct? It seems that Samba isn't installed. $ samba --version The program 'samba' is ...
2
votes
1answer
71 views

What is the latest samba vulnability, and should I care?

I've seen this post on Slashdot. Quote: there were no signs yet of attackers exploiting the vulnerability in the 12 hours since its discovery was announced. But she said it had taken researchers ...
1
vote
0answers
330 views

Samba or ldap-auth-client for LDAP authentication in Ubuntu client machines

We have around 100 employees using PCs, MACs and Linux machines (Ubuntu). I want to implement a central account and user authentication solution. I am planning to do it with Ubuntu machines first ...
0
votes
1answer
50 views

Does having an unused Ubuntu print server running pose a security risk?

When I browse to my home samba shares (on an Ubuntu server box) from another Linux box I can see the print server running in Nautilus alongside my samba share. Is it worth disabling it, both for ...
1
vote
3answers
830 views

Limit access to shares on fileserver based on client subnet

I recently segmented a network and the only hosts that are accessable from every subnet are the AD-Server and the fileserver. Now I want to limit the access to specific shares on that servers to a ...
0
votes
0answers
699 views

Pass the hash in samba?

can we pass the hash in a samba server if yes where LM:NTLM hashes are stored in this linux box ? thanks in advance .
4
votes
0answers
223 views

Is there are way to do Per-User Encrypted Samba Storage?

I'd like to address following scenario: Company keeps documents in-house and not in Cloud Documents are stored on Samba Share Sysadmins have access to the storage so they can dump it The point is to ...
2
votes
2answers
3k views

SFTP vs VPN and Samba share to share files remotely [closed]

I need to set up a way to share files securely and remotely with other users. I have a file server on which the user's files will be stored. Would it be more secure to have the users SFTP into the ...
0
votes
1answer
206 views

Local samba share without authentication

Locky and Co led me to make my local shares read only. Because there are only movies and series, it's not a big disadvantage of comfort. Now I created a share with read/write, only used for moving ...
1
vote
1answer
323 views

What is Badlock and how does it work?

A while back there was an announcement for the disclosure of a security vulnerability named "Badlock" - including this fancy name and a logo. The disclosure date was today and I was surprised (and ...
-2
votes
1answer
297 views

Samba - WebDAV - SFTP [closed]

I have an external online space and I can access the disk with SFTP, Samba or WebDAV. Which of these methods are the most secure? I am planning to copy about 200MB of data per day.
6
votes
1answer
2k views

Samba printer usernames and passwords , security problem

Password leaks , printing from Linux client to windows based print server When authenticating Linux users for using a windows share printer on their machine, the windows domain user-name and password ...
8
votes
1answer
7k views

Message signing disabled (dangerous, but default)

Over the last couple of years, I've developed a fairly keen interest in Penetration Testing & Information Security. Throughout this time, I've acquired (and accumulated) a range of different ...
1
vote
0answers
308 views

How can a remote attacker find a user UID via Samba?

Is there a way to remotely retrieve the UID of a user via a Samba share? I can get the user list with: rpcclient -W 'WORKGROUP' -c querydispinfo -U''%'' '192.168.21.129' 2>&1 index: 0xa RID: ...
2
votes
1answer
1k views

SMB/CIFS shares on HP-UX vulnerabilities

So, I've run an unauthenticated Nessus scan against a critical piece of infrastructure as part of a pen-test but I'm getting back some weird stuff and i can't seem to re-create the issue to ...