[Samba] Require help on removing SAMBA

[M, Suganthi]

Hi Team,

sun1333 $ svcs -a | grep samba                     
disabled       Apr_08   svc:/network/samba:default

I see SAMBA is already disabled with the above information but when vulnerability scan is done on our server we are reported with below vulnerabilities from SAMBA 3.0.24

Samba receive_smb_raw() Remote Code Execution Vulnerability
Samba MS-RPC Request Parsing Heap Buffer Overflows
Samba Remote Command Injection Vulnerability  

we don’t want to apply patch as we are not using it . I am also searching google for more help to remove it . Thanks for your inputs. 

-----Original Message-----
From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Reindl Harald via samba
Sent: 11 April 2017 03:57 PM
To: samba at lists.samba.org
Subject: Re: [Samba] Require help on removing SAMBA

stay on list!

Am 11.04.2017 um 12:08 schrieb M, Suganthi:
> Thanks for your reply . I am not able to find people who installed it 
> because it was done around
> 10 years back but I am requested to remove it from our SOLARIS10 server now .  
> I am able to see samba in /etc/samba  which has private folder and conf file. 
> Please let me know if you can help with executable commands with steps for removing SAMBA.

i typed in google "https://urldefense.proofpoint.com/v2/url?u=http-3A__www.tek-2Dtips.com_viewthread.cfm-3Fqid-3D471016&d=DwICaQ&c=gJN2jf8AyP5Q6Np0yWY19w&r=x2M0tR3EdRhNjaWgQZf1vcBsXdJ9DorFVGz7dY414mg&m=1bLDzswE6KWobjGDVIIbLt0ZW1bt7vXnRDl7fsgorpw&s=5KRtivQvjwpbCWQwzue73pLQMj6D9LpTsivT3Su17Hg&e= "
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.tek-2Dtips.com_viewthread.cfm-3Fqid-3D471016&d=DwICaQ&c=gJN2jf8AyP5Q6Np0yWY19w&r=x2M0tR3EdRhNjaWgQZf1vcBsXdJ9DorFVGz7dY414mg&m=1bLDzswE6KWobjGDVIIbLt0ZW1bt7vXnRDl7fsgorpw&s=5KRtivQvjwpbCWQwzue73pLQMj6D9LpTsivT3Su17Hg&e= 

as you have no idea how your machine is setup and there exists no documentation in your company you have 3 options:

* just disable the service and don't touch anything else
* setup a new machine with documentation
* just google around

this is *not* just a samba specific question

i would setup a new machine when obviously nobody has a clue about the software state and someone expects me to take over responisbility for a setup without documentation and a known state

> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Reindl 
> Harald via samba
> Sent: 11 April 2017 03:27 PM
> To: samba at lists.samba.org
> Subject: Re: [Samba] Require help on removing SAMBA
> 
> Am 11.04.2017 um 11:34 schrieb M, Suganthi via samba:
>> Can you please guide us to remove SAMBA 3.0.24 completely from our 
>> SOLARIS Server as we don't require it anymore?
> 
> nobody knows how you installed it and so even nobody knows locations 
> of data which on many package driven systems are below /etc/samba and 
> /var/lib/samba
> 
> anyways, that's more a operating system related question


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.samba.org_mailman_options_samba&d=DwICaQ&c=gJN2jf8AyP5Q6Np0yWY19w&r=x2M0tR3EdRhNjaWgQZf1vcBsXdJ9DorFVGz7dY414mg&m=1bLDzswE6KWobjGDVIIbLt0ZW1bt7vXnRDl7fsgorpw&s=PfsvCAZ0eHOG9NBkhx0sWt7PSeSz76msXGrq-gaSpZs&e=