Linux Toolkits

Thursday, February 26, 2015

Watch Red Hat Forum 2014 Sessions Now, On Demand. See Red Hat Forum 2014 – Singapore

An uninitialized pointer use flaw was found in the Samba daemon (smbd). A malicious Samba client could send specially crafted netlogon packets that, when processed by smbd, could potentially lead to arbitrary code execution with the privileges of the user running smbd (by default, the root user)

For more details about the vulnerability or information on updating your Samba connections, see
CVE Page: https://access.redhat.com/security/cve/CVE-2015-0240
KCS Article: https://access.redhat.com/articles/1346913
KCS Solution: https://access.redhat.com/solutions/1351573

Workaround / Advices
It is recommended to update to the latest software patches.

Other references:
Please refer to the TNAS report 24 February 2015 (Ref: 24022015-02) for additional information
Samba - https://www.samba.org/samba/security/CVE-2015-0240
US-Cert - https://www.us-cert.gov/ncas/current-activity/2015/02/24/Samba-Remote-Code-Execution-Vulnerability
Tripwire - http://www.tripwire.com/state-of-security/vulnerability-management/vert-threat-alert-samba-remote-code-execution/

Do take a look. Like this video

The solution is taken from Enable 3D Support option is greyed out in virtual machine video card settings (2092210) Modify the VMX file of the Virtual Machine

1. Take backup of the virtual machines VMX file

2. Open the VMX file, using text editor and add this line in the end

mks.enable3d = TRUE

*You can use the vi to edit the VMX file

3. Check the VMID of the Guest OS you are reloading

# vim-cmd "vmsvc/getallvms"
Vmid        Name .........
2

4. Reload the virtual machines configuration file by running this command:

# vim-cmd vmsvc/reload VMID