[Info-vax] SAMBA and Ransomeware

[Arne Vajhøj]

On 7/14/2017 5:46 AM, Ian Miller wrote:
> On Thursday, July 13, 2017 at 1:09:58 AM UTC+1, Arne Vajhøj wrote:
>> On 7/12/2017 10:48 AM, Neil Rieck wrote:
>>> I posted my worry about SAMBA a few weeks back but just noticed this blurb today.
>>>
>>> https://www.theregister.co.uk/2017/07/11/hpe_stops_nonstop_server_samba_bugs/
>>
>> There probably also are some vulnerabilities in Samba for VMS.
> 
> cve-2017-7494 applies to SAMBBA 3.5.0 onwards. OpenVMS CIFS is based on
> Samba 3.0.28a (released in 2008).

So that one does not apply.

But there can easily be older known vulnerabilities in the VMS version.

Or unknown vulnerabilities.

Arne