Badlock Vulnerability Falls Flat Against Its Hype

  • 12 April 2016
  • 1 reply
  • 153 views

Userlevel 7
Badge +54
See Also - Clear April 12: Windows, Samba to splat curious 'crucial' Badlock bug
 
by Michael Mimoso April 12, 2016
 
                                         



Weeks of anxiety and concern over the Badlock vulnerability ended today with an anticlimactic thud.

Badlock was the security boogeyman since the appearance three weeks ago of a website and logo branding the bug as something serious in Samba, an open source implementation of the server message block (SMB) protocol that provides file and print services for Windows clients.  

As it turns out, Badlock was hardly the remote code execution monster many anticipated. Instead, it’s a man-in-the-middle and denial-of-service bug, allowing an attacker to elevate privileges or crash a Windows machine running Samba services.
 
Full Article

1 reply

Userlevel 7
Well, what sounds like a good piece of news for a change, eh? ;)

Reply