Update kills code-execution threat in Samba

Samba developers have warned of a software flaw that allows attackers to remotely execute malicious code on systems running the widely used file-sharing package.

Version 3.5.5, which was released on Tuesday, fixes the underlying buffer overrun in functions used to generate a credential known as a Windows Security ID. It can be exploited by sending a booby-trapped ID that overflows the stack variable and injects malicious code into memory.

It remains unclear how easy it is to exploit the bug. H D Moore, CSO of Rapid7 and chief architect of the Metasploit project, said the only vector he’s been able to identify is an option known as quota support, which isn’t enabled by default. Even when turned on, he added, an attacker would need a root password.

Moore said other possible openings included the file find, the get/set user quota, and active directory, but so far, none of them has panned out so far.

Samba is used to share files across systems running Linux, Windows, and Mac OS X. The vulnerability affects Samba versions going back to 3.0, which was released more than five years ago. It was discovered during an internal audit. Andrew Bartlett, the Cisco Systems employee who identified the bug, didn’t return an email seeking additional details.

Seagate launches 3 Terabyte(TB) external desktop drive

Seagate has once again proved its efficiency in producing external hard drives. Seagate has launched 3 Terabyte FreeAgent GoFlex Desk external hard drive.

Seagate says that it has released this huge hard drive to enable the users meet both the home and office requirements. This vast hard drive can store upto 120 HD movies, 1,500 video games, large amount of photos, videos, music etc.

The best part about this 3TB capacity hard drive is its compatibility with both Windows and Mac OS X. This comes with USB 2.0 adapter and users can buy eSATA or FireWire 800 separately. This huge device can be purchased for $249.99.

Mozilla Releases Firefox 4.0 Beta

Mozilla has released the first beta of its Firefox 4.0 web browser based on the Gecko 2.0 Web platform layout engine. Obviously, all the add-ons you’ve been using with the Firefox 3.7 version won’t work on with the new Firefox 4.0 beta. This new 4.0 beta version of the web browser mainly revamps the looks and brings a sizeable number of features that include WebM video format and HTML5 support.

The first noticeable feature of this new Firefox 4.0 beta is that all tabs would be visible on the tab. However, this is visible for Windows based OS users only. We believe that the visual delight would slowly appear for the Linux and Mac OS X versions of the web browser when the final build of Firefox 4.0 releases. The new significant features included in the Firefox 4.0 beta are:

• Add-ons Manager: More space to efficiently manage your favorite add-ons, plugins and themes.
• HD Video: The future WebM format is supported and promises HD-quality hardware accelerated HTML5 video on the web.
• HTML5 Support: Better HTML parsing, support for HTML5 form controls and also runs the latest web apps based on HTML5 such as Google’s Gmail and Yahoo’s Mail interface for the mobile phones.
• Full WebGL support for in-browser 3D rendering.

Apart from these features, the new Firefox 4.0 beta also promises performance improvement and the necessary security improvements to protect browser history.

Download the Firefox 4.0 beta for Windows, Linux or Mac OS X from here.