Saint SambaCry, Linux Cousin of EternalBlue

Patron of Samba servers, writable network shares, and NAS boxes forgotten in a corner.

Life

On 24 May 2017 Samba fixed SambaCry (CVE-2017-7494), also called EternalRed. On a Samba server with a writable share, a client could upload a library and make the server load and run it, achieving remote code execution in a single line. It arrived weeks after WannaCry, and hit the many NAS boxes and Linux devices that kept their file shares open.

Prayer

O Saint SambaCry, who makes the server run the library you handed it, let our shares not load what we write to them. Amen.

How to celebrate

Celebrated by updating Samba, adding 'nt pipe support = no', and removing writable shares nobody uses.

Writable share, runnable server.