Update kills code-execution threat in Samba

Samba developers have warned of a software flaw that allows attackers to remotely execute malicious code on systems running the widely used file-sharing package.

Version 3.5.5, which was released on Tuesday, fixes the underlying buffer overrun in functions used to generate a credential known as a Windows Security ID. It can be exploited by sending a booby-trapped ID that overflows the stack variable and injects malicious code into memory.

It remains unclear how easy it is to exploit the bug. H D Moore, CSO of Rapid7 and chief architect of the Metasploit project, said the only vector he’s been able to identify is an option known as quota support, which isn’t enabled by default. Even when turned on, he added, an attacker would need a root password.

Moore said other possible openings included the file find, the get/set user quota, and active directory, but so far, none of them has panned out so far.

Samba is used to share files across systems running Linux, Windows, and Mac OS X. The vulnerability affects Samba versions going back to 3.0, which was released more than five years ago. It was discovered during an internal audit. Andrew Bartlett, the Cisco Systems employee who identified the bug, didn’t return an email seeking additional details.

Mozilla Releases Firefox 4.0 Beta

Mozilla has released the first beta of its Firefox 4.0 web browser based on the Gecko 2.0 Web platform layout engine. Obviously, all the add-ons you’ve been using with the Firefox 3.7 version won’t work on with the new Firefox 4.0 beta. This new 4.0 beta version of the web browser mainly revamps the looks and brings a sizeable number of features that include WebM video format and HTML5 support.

The first noticeable feature of this new Firefox 4.0 beta is that all tabs would be visible on the tab. However, this is visible for Windows based OS users only. We believe that the visual delight would slowly appear for the Linux and Mac OS X versions of the web browser when the final build of Firefox 4.0 releases. The new significant features included in the Firefox 4.0 beta are:

• Add-ons Manager: More space to efficiently manage your favorite add-ons, plugins and themes.
• HD Video: The future WebM format is supported and promises HD-quality hardware accelerated HTML5 video on the web.
• HTML5 Support: Better HTML parsing, support for HTML5 form controls and also runs the latest web apps based on HTML5 such as Google’s Gmail and Yahoo’s Mail interface for the mobile phones.
• Full WebGL support for in-browser 3D rendering.

Apart from these features, the new Firefox 4.0 beta also promises performance improvement and the necessary security improvements to protect browser history.

Download the Firefox 4.0 beta for Windows, Linux or Mac OS X from here.

Nokia N900 handset soars into Indian market

Nokia has news for those looking out for a mobile computing solution that’s easy to fit into a pocket. Nokia has brought the N900 smartphone to Indian shores. The handset flaunts a high resolution 3.5″ WVGA touch screen and full slide-out QWERTY keypad for comfortable typing.

The device is fitted with a 5MP camera that boasts of Carl Zeiss optics and dual LED flash. Users can enjoy multiple connectivity options like access to 3G networks, Ovi services and apps like Nokia Maps, messaging, IM, Ovi Files through the Ovi Store. This phone allows access to e-mail, social networking sites, music, websites, images, and more. It provides users with memory of up to 32GB that can be expanded by up to 48GB through a microSD card.

“Mobile computing has undergone a substantive evolution owing to changing consumer needs. Technology enthusiasts and mobile workers today seek much more from their mobile device more power, more ability, enhanced functionality and constant connectivity,” affirmed Jasmeet Gandhi, Head of Product and Services Marketing, Nokia India, while commenting on the N900’s unveiling.

Apart being powered by an ARM Cortex-A8 processor, the handset offers up to 1GB of application memory and OpenGL ES 2.0 for graphics acceleration. Users can switch between applications and access running content through the dashboard. The phone allows the home screen to be customized with favorite shortcuts, widgets and applications as per user requirements.

The N900 has been attributed with Nokia’s Linux based Maemo operating platform which is a web based program which complements Nokia’s smartphones that run the Symbian OS. This software equips developers to create various applications such as podcasting, IM apps and Twitter among others. The tag cloud UI allows users to share images and videos online directly from the phone. The device is touted to possess multi tasking capabilities that let users to open several applications simultaneous.

Automatic Maemo updates provide users with video calling and FB chat support, software upgrades, portrait browsing, e-mail and calendar improvements. This gadget is equipped with Mozilla technology that makes websites look the way they would appear on a PC. Additionally, the quality of the online videos and interactive apps is enhanced with full Adobe Flash 9.4 support. The device enables speedy internet connectivity via 10/2 HSPA and WLAN. Users can surf web pages while chatting on instant messaging or listening to music.

“The Nokia N900 has been designed specifically to address the unique needs of this section of consumers, who are obsessed with all new forms of technology. With an open source operating system, faster multitasking ability, incorporated technology like an OMAP processor, real time web widgets and the ability to be connected just about anywhere, the Nokia N900 has kick started a new era of powerful mobile computing,” added Gandhi.

The winning participant or ‘Maemo Master’ of Nokia’s newly launched ‘The Maemo Masters Invitational Series’ interactive web based initiative for mobile and technology buffs across India will be invited to purchase a special Maemo Master Edition of the N900. This special edition will encompass the Nokia N900, Nokia BH 214 Bluetooth stereo headset and more.

The Nokia N900 will be available for purchase from June 9 this year through Nokia branded outlets in major cities across India. The price tag attached to this handset is unclear for now.