Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | Samba WINS ÏÂÁî×¢ÈëÎó²î |
CVE ID | CVE-2025-10230 |
Îó²îÀàÐÍ | ÏÂÁî×¢Èë | ·¢Ã÷ʱ¼ä | 2025-10-16 |
Îó²îÆÀ·Ö | 10 | Îó²îÆ·¼¶ | ÑÏÖØ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»ÐèÒª |
PoC/EXP | δ¹ûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
SambaÊÇÒ»¸ö¿ªÔ´µÄÈí¼þÌ×¼þ £¬£¬£¬£¬£¬ £¬Ö÷ÒªÓÃÓÚÔÚUnixºÍLinuxϵͳÓëWindowsϵͳ֮¼ä¹²ÏíÎļþºÍ´òÓ¡×ÊÔ´¡£¡£¡£¡£¡£¡£ËüʵÏÖÁË΢ÈíµÄSMB/CIFSÐÒé £¬£¬£¬£¬£¬ £¬Ê¹µÃ·ÇWindowsϵͳÄܹ»ÓëWindowsÍøÂçÇéÐμæÈÝ £¬£¬£¬£¬£¬ £¬ÌṩÎļþ¹²Ïí¡¢´òÓ¡»ú¹²ÏíÒÔ¼°Óò¿ØÖƵȹ¦Ð§¡£¡£¡£¡£¡£¡£Samba¿É×÷ΪÓò¿ØÖÆÆ÷»ò³ÉԱЧÀÍÆ÷ÔËÐÐ £¬£¬£¬£¬£¬ £¬Ö§³ÖÓëWindows Active Directory¼¯³É £¬£¬£¬£¬£¬ £¬ÌṩÓû§ÈÏÖ¤ºÍȨÏÞÖÎÀí¡£¡£¡£¡£¡£¡£ÓÉÓÚÆä¸ß¼æÈÝÐԺͿª·ÅÔ´´úÂë £¬£¬£¬£¬£¬ £¬SambaÆÕ±éÓ¦ÓÃÓÚ¿çƽ̨µÄÆóÒµÍøÂçÇéÐÎÖС£¡£¡£¡£¡£¡£
2025Äê10ÔÂ16ÈÕ £¬£¬£¬£¬£¬ £¬¼øºÚµ£±£Íø¼¯ÍÅVSRC¼à²âµ½Ò»¸ö±£´æÓÚSambaÖеÄÏÂÁî×¢ÈëÎó²î £¬£¬£¬£¬£¬ £¬¸ÃÎó²îÓ°ÏìÆôÓÃÁËWINSЧÀÍÆ÷µÄSambaÓò¿ØÖÆÆ÷¡£¡£¡£¡£¡£¡£ÏêϸÀ´Ëµ £¬£¬£¬£¬£¬ £¬µ±SambaÉèÖÃÁËwins hook²ÎÊý £¬£¬£¬£¬£¬ £¬²¢ÇÒWINSÖ§³Ö±»ÆôÓÃʱ £¬£¬£¬£¬£¬ £¬SambaÔÚWINSÃû³Æ±ä»»Ê±»áÖ´ÐиòÎÊýÖ¸¶¨µÄ³ÌÐò¡£¡£¡£¡£¡£¡£È»¶ø £¬£¬£¬£¬£¬ £¬Sambaδ¶Ôת´ï¸øwins hook³ÌÐòµÄÃû³Æ¾ÙÐÐÓÐÓÃÑéÖ¤ £¬£¬£¬£¬£¬ £¬µ¼Ö¿ÉÒÔͨ¹ý²åÈë°üÀ¨shellÔª×Ö·ûµÄÃû³ÆÀ´Ö´ÐÐí§ÒâÏÂÁî £¬£¬£¬£¬£¬ £¬´Ó¶øʵÏÖδ¾ÈÏÖ¤µÄÔ¶³Ì´úÂëÖ´ÐС£¡£¡£¡£¡£¡£Îó²îÆÀ·Ö10·Ö£¨ÒÀ¾ÝSamba¹Ù·½Í¨¸æ£© £¬£¬£¬£¬£¬ £¬Îó²î¼¶±ðÑÏÖØ¡£¡£¡£¡£¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
Samba¹Ù·½ÒÑÐû²¼ÐÞ¸´²¹¶¡ £¬£¬£¬£¬£¬ £¬ÒÔÐÞ¸´¸ÃÎó²î¡£¡£¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£ºhttps://www.samba.org/
3.2 ÔÝʱ²½·¥
3.3 ͨÓý¨Òé
? °´ÆÚ¸üÐÂϵͳ²¹¶¡ £¬£¬£¬£¬£¬ £¬ïÔÌϵͳÎó²î £¬£¬£¬£¬£¬ £¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£¡£¡£? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ £¬£¬£¬£¬£¬ £¬Ð޸ķÀ»ðǽսÂÔ £¬£¬£¬£¬£¬ £¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ £¬£¬£¬£¬£¬ £¬ïÔ̽«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø £¬£¬£¬£¬£¬ £¬ïÔ̹¥»÷Ãæ¡£¡£¡£¡£¡£¡£? ʹÓÃÆóÒµ¼¶Çå¾²²úÆ· £¬£¬£¬£¬£¬ £¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£¡£¡£? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí £¬£¬£¬£¬£¬ £¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔÔò £¬£¬£¬£¬£¬ £¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£¡£¡£
3.4 ²Î¿¼Á´½Ó
https://www.samba.org/samba/security/CVE-2025-10230.html/
¾©¹«Íø°²±¸11010802024551ºÅ