TeamAmaze / AmazeFileManager

Material design file manager for Android
https://teamamaze.xyz
GNU General Public License v3.0
5.31k stars 1.57k forks source link

[Exploit] Remote code execution through smb v1 #699

Closed frap129 closed 7 years ago

frap129 commented 7 years ago

Amaze is a wonderful file manager, but please, for the love of god, remove smb v1 support. Whether this means updating to smb v2 or 3, or removing smb support all together temporarily, this is a major bug that needs to be addressed. https://arstechnica.com/information-technology/2017/05/a-wormable-code-execution-bug-has-lurked-in-samba-for-7-years-patch-now/ https://f5.com/labs/articles/threat-intelligence/cyber-security/sambacry-the-linux-sequel-to-wannacry

VishalNehra commented 7 years ago

Thank you for writing. It's already planned. Please consult #670