Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found 1 articles for you...
210

Samba Alert: Essential Patches for Major Security Vulnerabilities

Vulnerabilities have been found in Samba, software that lets you access shared files. So here's why it's vital you install these updates. . Samba has rolled out security updates for high-severity vulnerabilities that can allow a cybercriminal to take control of systems running the affected Samba versions. The critical vulnerabilities CVE-2022-38023, CVE-2022-37966, CVE-2022-37967, and CVE-2022-45141 have been patched in versions 4.17.4, 4.16.8, and 4.15.13. All previous versions of Samba are deemed vulnerable. So why is it important for you to update Samba? Samba is a free and open-source software suite that offers fast and stable file and print services. It is possible to integrate the file-sharing tool with a Microsoft Windows Server Domain, either as a domain member or a Domain Controller (DC). . Samba has released patches addressing critical vulnerabilities that could permit an attacker to seize control.. Samba Update, Samba Security Fixes, File Sharing Threats, Open Source Update. . Brittany Day

Calendar%202 Dec 26, 2022 User Avatar Brittany Day Security Vulnerabilities
77

Samba 4 AD DC Advisory: Password Change Risk For Admin Accounts

Samba admins: get patching and/or updating. Unless you’re content to have your admin passwords overwritten by, well, anyone else using Samba.. That’s the gist of an advisory warning that “On a Samba 4 Active Directory domain controller (AD DC) any authenticated user can change other users' passwords over LDAP, including the passwords of administrative users and service accounts.” . Samba 4 Active Directory Domain Controller enables any verified user to modify administrative passwords, revealing critical vulnerabilities in security measures.. Samba Administration, Password Change Threat, Active Directory Risks, Samba Update Advisory. . LinuxSecurity.com Team

Calendar%202 Mar 14, 2018 User Avatar LinuxSecurity.com Team Server Security
78

Samba Critical Update: nmbd Daemon Security Flaw Announcement

The latest in a recent series of updates to the Samba file system software fixes a critical vulnerability that could allow an attacker on the local network to take control of a host running a vulnerable version of the Samba nmbd NetBIOS name services daemon.. Samba is an open source implementation of the SMB/CIFS network file sharing protocol. SMB/CIFS is most famous as the protocol used in file sharing over Microsoft Windows networks, and Samba exists largely for non-Windows interoperability with those networks. nmbd is a server component of it which responds to NetBIOS requests over IP networks, associating NetBIOS names and IP addresses. The link for this article located at ZDNet Blogs is no longer available. . A significant Samba patch resolves security flaws in SMB/CIFS, bolstering both network integrity and file transfer functionalities.. Samba Patch, File Sharing Security, Network Update. . LinuxSecurity.com Team

Calendar%202 Aug 04, 2014 User Avatar LinuxSecurity.com Team Vendors/Products
77

Exploring Samba Security Modes and Authentication Techniques

If you have read any of the Samba content here on Ghacks you probably will have noticed that within the smb.conf configuration file a line that begins with security =. This is a very important part of Samba setup and generally the section that gives users the most problems. Although the security mode would seem fairly straight-forward, it is certainly worth explaining.. In this article I will discuss what the security mode feature does and what the different modes are. By the end of this article there should be no confusion as to which mode your Samba setup should use. What are security modes? I like to think of security modes as a means to inform the server just how a client will authenticate. You know about authentication from many sources. You can authenticate at a local level, as part of a domain, using Active Directory, and more. How you authenticate is generally dictated by your IT department (or by yourself if you are personal or home user). Because of the different types of authentication, Samba needs a way to know how this authentication is going to happen. The link for this article located at gHacks is no longer available. . Explore Samba security configurations and learn to set up your authentication procedures skillfully in this comprehensive guide.. Samba Security, Authentication Modes, Network Configuration, File Sharing, Samba Setup. . LinuxSecurity.com Team

Calendar%202 Mar 18, 2010 User Avatar LinuxSecurity.com Team Server Security
74

Ensuring Samba Security for Reliable File Sharing and Configuration

Configuring Samba for your office or home can provide many advantages. By encouraging users to store files on a central file server, you can simplify data backup and in some cases, software installation and maintenance. Unfortunately, the initial configuration of Samba can be tricky. Many simple steps need to be executed in the correct order, and one small slip up can have big repercussions. This chapter explores the ways in which you can recover from those mistakes that you couldn't avoid. Do you thing about how can I make my share secure? When setting up Samba it alway important to make it secure. This article will show you how to setup a secure Samba share.. The link for this article located at Linux home networking is no longer available. . Master the crucial Samba security protocols to foster safe file exchange and streamline data handling across your network.. Samba Security, File Server Security, Secure Configuration, Network Setup. . Bill Locke

Calendar%202 May 06, 2008 User Avatar Bill Locke Network Security
77

Securing Linux: Protection Strategies For Apache, ProFTPd, And Samba

While the vast majority of Linux users are hard-core techies, some may be using Linux because they want to try something new, are interested in the technology, or simply cannot afford or do not want to use Microsoft Windows. . After becoming acquainted with the new interface of Linux, whether KDE, Gnome, or another window manager, users may begin to explore their system. Many machines come with default installations of Apache and Samba, and a few others even include a FTP daemon. The link for this article located at Net-Security.org is no longer available. . Improving security and optimizing user interaction by fortifying Linux with Nginx, vsftpd, and Samba. Explore further in our comprehensive manual.. Apache Configuration, ProFTPd Setup, Samba Hardening. . LinuxSecurity.com Team

Calendar%202 Jun 02, 2005 User Avatar LinuxSecurity.com Team Server Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200