{"id":10523,"date":"2025-10-16T13:26:48","date_gmt":"2025-10-16T06:26:48","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10523"},"modified":"2026-02-05T13:26:55","modified_gmt":"2026-02-05T06:26:55","slug":"lo-hong-diem-10-trong-samba-de-doa-may-chu-ten-mien-doanh-nghiep","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/10\/16\/lo-hong-diem-10-trong-samba-de-doa-may-chu-ten-mien-doanh-nghiep\/","title":{"rendered":"L\u1ed7 h\u1ed5ng “\u0111i\u1ec3m 10” trong Samba \u0111e d\u1ecda m\u00e1y ch\u1ee7 t\u00ean mi\u1ec1n doanh nghi\u1ec7p"},"content":{"rendered":"

Trong b\u1ed1i c\u1ea3nh c\u00e1c doanh nghi\u1ec7p chuy\u1ec3n \u0111\u1ed5i s\u1ed1 m\u1ea1nh m\u1ebd, nhi\u1ec1u h\u1ec7 th\u1ed1ng c\u00f4ng ngh\u1ec7 c\u0169 nh\u01b0 Samba (c\u00f4ng c\u1ee5 chia s\u1ebb t\u1ec7p tin ph\u1ed5 bi\u1ebfn tr\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux\/Unix) v\u1eabn \u0111ang \u00e2m th\u1ea7m ho\u1ea1t \u0111\u1ed9ng trong m\u1ea1ng n\u1ed9i b\u1ed9 c\u1ee7a h\u00e0ng ng\u00e0n t\u1ed5 ch\u1ee9c tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. Tuy nhi\u00ean, ch\u00ednh nh\u1eefng c\u00f4ng c\u1ee5 t\u01b0\u1edfng nh\u01b0 \u201cl\u00e0nh t\u00ednh\u201d n\u00e0y l\u1ea1i c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh c\u1eeda ng\u00f5 b\u1ecb khai th\u00e1c nguy hi\u1ec3m n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt th\u01b0\u1eddng xuy\u00ean.<\/b><\/p>\n

\"1760607811587.png\"<\/a>\u200b<\/div>\n

Nh\u00f3m ph\u00e1t tri\u1ec3n Samba (The Samba Team) \u0111\u00e3 ph\u00e1t h\u00e0nh c\u1ea3nh b\u00e1o b\u1ea3o m\u1eadt, c\u00f4ng b\u1ed1 hai l\u1ed7 h\u1ed5ng an ninh. Trong \u0111\u00f3, \u0111\u00e1ng ch\u00fa \u00fd nh\u1ea5t l\u00e0 l\u1ed7 h\u1ed5ng \u0111\u1ea7u ti\u00ean CVE-2025-10230, l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m t\u1ed1i \u0111a (CVSS 10), cho ph\u00e9p th\u1ef1c thi m\u00e3 t\u1eeb xa kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c tr\u00ean c\u00e1c m\u00e1y ch\u1ee7 Active Directory Domain Controller c\u00f3 c\u1ea5u h\u00ecnh nh\u1ea5t \u0111\u1ecbnh, \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn nhi\u1ec1u h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p s\u1eed d\u1ee5ng c\u1ea5u h\u00ecnh c\u0169 ho\u1eb7c l\u1ed7i th\u1eddi.<\/i><\/p>\n

L\u1ed7 h\u1ed5ng ch\u1ec9 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c h\u1ec7 th\u1ed1ng Samba Active Directory Domain Controller (AD DC), t\u1ee9c l\u00e0 nh\u1eefng m\u00e1y ch\u1ee7 \u0111\u00f3ng vai tr\u00f2 qu\u1ea3n l\u00fd x\u00e1c th\u1ef1c, t\u00ean mi\u1ec1n trong m\u1ea1ng doanh nghi\u1ec7p, khi c\u00f3 k\u00edch ho\u1ea1t t\u00ednh n\u0103ng WINS server v\u00e0 c\u1ea5u h\u00ecnh tham s\u1ed1 \u201cwins hook\u201d trong t\u1eadp tin smb.conf.<\/p>\n

\u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 kh\u00f4ng ph\u1ea3i t\u1ea5t c\u1ea3 h\u1ec7 th\u1ed1ng d\u00f9ng Samba \u0111\u1ec1u b\u1ecb \u1ea3nh h\u01b0\u1edfng, v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c v\u1eabn s\u1eed d\u1ee5ng h\u1ea1 t\u1ea7ng t\u00ean mi\u1ec1n c\u0169 ho\u1eb7c t\u00edch h\u1ee3p WINS nguy c\u01a1 l\u00e0 r\u1ea5t l\u1edbn.<\/p>\n

L\u1ed7 h\u1ed5ng CVE-2025-10230 b\u1eaft ngu\u1ed3n t\u1eeb vi\u1ec7c Samba kh\u00f4ng ki\u1ec3m tra \u0111\u1ea7y \u0111\u1ee7 d\u1eef li\u1ec7u \u0111\u1ea7u v\u00e0o khi th\u1ef1c hi\u1ec7n x\u1eed l\u00fd t\u00ean NetBIOS qua WINS server. C\u1ee5 th\u1ec3, khi m\u1ed9t client \u0111\u0103ng k\u00fd t\u00ean ho\u1eb7c c\u1eadp nh\u1eadt t\u00ean NetBIOS, Samba s\u1ebd g\u1ecdi th\u1ef1c thi m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh \u0111\u01b0\u1ee3c ch\u1ec9 \u0111\u1ecbnh b\u1edfi \u201cwins hook\u201d.<\/p>\n

Tuy nhi\u00ean, d\u1eef li\u1ec7u \u0111\u1ea7u v\u00e0o (t\u00ean NetBIOS) l\u1ea1i kh\u00f4ng \u0111\u01b0\u1ee3c ki\u1ec3m tra ho\u1eb7c l\u1ecdc s\u1ea1ch k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t d\u1eabn \u0111\u1ebfn tr\u01b0\u1eddng h\u1ee3p k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o chu\u1ed7i l\u1ec7nh shell, ch\u1eb3ng h\u1ea1n nh\u01b0: “;” ho\u1eb7c “|” \u0111\u1ec3 \u00e9p Samba ch\u1ea1y l\u1ec7nh h\u1ec7 th\u1ed1ng theo \u00fd mu\u1ed1n.<\/p>\n

\u0110i\u1ec1u \u0111\u00e1ng s\u1ee3 l\u00e0 cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y kh\u00f4ng y\u00eau c\u1ea7u \u0111\u0103ng nh\u1eadp, t\u1ee9c l\u00e0 b\u1ea5t k\u1ef3 ai tr\u00ean m\u1ea1ng c\u00f3 th\u1ec3 khai th\u00e1c n\u1ebfu h\u1ecd truy c\u1eadp \u0111\u01b0\u1ee3c \u0111\u1ebfn m\u00e1y ch\u1ee7 ch\u1ee9a WINS.<\/p>\n

\n
\n
\u201cGiao th\u1ee9c WINS v\u1ed1n \u0111\u00e3 l\u1ed7i th\u1eddi v\u00e0 qu\u00e1 tin t\u01b0\u1edfng v\u00e0o d\u1eef li\u1ec7u ph\u00eda client, cho ph\u00e9p h\u1ecd g\u1eedi b\u1ea5t k\u1ef3 t\u00ean n\u00e0o mi\u1ec5n l\u00e0 n\u1eb1m trong gi\u1edbi h\u1ea1n 15 k\u00fd t\u1ef1 NetBIOS. \u0110i\u1ec1u n\u00e0y t\u1ea1o \u0111i\u1ec1u ki\u1ec7n l\u00fd t\u01b0\u1edfng \u0111\u1ec3 nh\u00fang m\u00e3 \u0111\u1ed9c shell v\u00e0 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng\u201d, Samba Team c\u1ea3nh b\u00e1o.<\/div>\n
Nh\u1ea5n \u0111\u1ec3 m\u1edf r\u1ed9ng…<\/a><\/div>\n<\/div>\n<\/blockquote>\n

\u0110\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng ki\u1ec3u t\u1ea5n c\u00f4ng nghi\u00eam tr\u1ecdng nh\u1ea5t trong an ninh m\u1ea1ng hi\u1ec7n \u0111\u1ea1i. N\u1ebfu th\u00e0nh c\u00f4ng, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3:<\/p>\n