Samba Releases Security Update

Threat ID:: CC-3623
Threat Severity:: Information only
Published:: 23 September 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Samba

Threat details

Introduction

The Samba Team has released a security update to address the Zerologon vulnerability (CVE-2020-1472) in multiple versions of Samba. This vulnerability could allow a remote attacker to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review Samba's CVE-2020-1472 security announcement and apply the relevant updates and workarounds

Definitive source of threat updates

https://www.samba.org/samba/security/CVE-2020-1472.html

CVE Vulnerabilities

Status Master

CVE-2020-1472

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC), aka 'Netlogon Elevation of Privilege Vulnerability'.

Last edited: 23 September 2020 12:26 pm