Samba ‘Fruit’ Bug Allows RCE, Full Root User Access

Samba ‘Fruit’ Bug Allows RCE_ Full Root User Access-01

Sensitive vulnerability to the Samba platform may allow attackers to access remote control code with root privileges on servers.

Samba is a collaborative site that allows Windows and Linux / Unix-based hosts to work together and share file and print services with multi-platform devices on a common network, including SMB file sharing. Acquiring the ability to use remote code as a root user means that the attacker will be able to read, modify or delete any files in the system, count users, install malware (such as cryptominers or ransomware), and pivot to develop into a company network.

It affects all Samba versions prior to v.4.13.17, and has a rating of 9.9 out of 10 on the CVSS security rating. Additionally, other packages that support Samba Hat, SUSE Linux and Ubuntu are also affected.

Read More: https://threatpost.com/samba-fruit-bug-rce-root-access/178141/