SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Badlock : A Critical Samba Vulnerability

Badlock : A Critical Samba Vulnerability

A critical vulnerability found in Samba which affects all Windows platforms, termed as badlock. It will be patched on April 12, 2016. This is called samba badlock vulnerability. A vulnerability management tool can mitigate this vulnerability.

Mar 23, 2016By Kumarswamy S2 min read

A critical vulnerability found in Samba which affects all Windows platforms, termed as badlock. It will be patched on April 12, 2016. This is called samba badlock vulnerability. A vulnerability management tool can mitigate this vulnerability.

credit : badlock.org
credit : badlock.org

Samba is an open source implementation of the SMB/CIFS network protocol, which runs on non-windows operating systems like Unix, IBM System 390, Linux, OpenVMS and other operating systems and allows them to interact with Microsoft Windows to access files and printer over a network. Also, a auto patching solution can patch this vulnerability.

Samba Badlock vulnerability discovered by Stefan Metzmacher, a member of the international Samba Core Team and works at SerNet on Samba. However, he reported the bug to Microsoft and has been working with them to bring out the patch to badlock flaw.

From badlock.org:

plaintext
On April 12th, 2016 a crucial security bug in Windows and Samba will be disclosed. We call it: Badlock.

Engineers at Microsoft and the Samba Team are working together to  get this problem fixed. Patches will be released on April 12th.

Admins and everyone responsible for Windows or Samba server infrastructure: Mark the date. (Again: It's April 12th, 2016.)

Please get yourself ready to patch all systems on this day. We are pretty sure that there will be exploits soon after we publish all relevant information.

However some of the deleted tweets from the person registered badlock.org domain, Johannes Loxen reveal two things :

  • The reason behind disclosing the vulnerability is “SerNet gets marketing” as a side effect.
badlock_marketing
badlock_marketing
  • Another tweet is giving us clue on the impact of exploitation, which is “admin accounts for everyone on the same LAN”.

More information about this vulnerability going disclosed on Microsoft Patch Tuesday (i.e. 12th, April, 2016) by Samba Team and Microsoft.

SecPod Saner

A free vulnerability mitigation software. Build strong defense.

Kumarswamy S

badlock_admin_lan
badlock_admin_lan

Featured Posts

Open ScreenConnect Attacks Deploy SCKit Malware Across MSP Environments, Targeting 288 Endpoints in 48 Organizations

ScreenConnect Attacks Deploy SCKit Malware Across MSP Environments, Targeting 288 Endpoints in 48 Organizations

CVE Research

ScreenConnect Attacks Deploy SCKit Malware Across MSP Environments, Targeting 288 Endpoints in 48 Organizations

A new worm-like malware toolkit called SCKit targets managed service providers (MSPs) by abusing ScreenConnect remote access sessions. The campaign attempts to move from infected customer endpoints to MSP technicians' workstations, potentially exposing additional customer networks. Researchers identified activity affecting at least 288 endpoints across 48 organizations.

Nov 13, 2026

Open Critical Apache HTTP/2 RCE Flaw Lets Unauthenticated Attackers Take Full Control of the Server
vulnerability researchCritical Apache HTTP/2 RCE Flaw Lets Unauthenticated Attackers Take Full Control of the Server

CVE Research

Critical Apache HTTP/2 RCE Flaw Lets Unauthenticated Attackers Take Full Control of the Server

CVE-2026-119618 is a critical race-condition vulnerability in Apache HTTP Server’s mod_http2 that can lead to unauthenticated remote code execution when HTTP/2 is enabled. Versions 2.4.55 through 2.4.70 are affected and fixed in 2.4.71. Only hosts that negotiate h2 or h2c are exposed. This article covers how the flaw works, distribution fixes, temporary Protocols mitigation, and related issues in the same release.

Nov 12, 2026

Open Microsoft’s November 2026 Patch Tuesday: 1,093 Vulnerabilities, 63 Critical Fixes, and an Outlook Threat
Microsoft’s November 2026 Patch Tuesday: 1,093 Vulnerabilities, 63 Critical Fixes, and an Outlook Threat

CVE Research

Microsoft’s November 2026 Patch Tuesday: 1,093 Vulnerabilities, 63 Critical Fixes, and an Outlook Threat

Microsoft’s November 2026 Patch Tuesday addresses 1,093 security vulnerabilities, including 63 Critical flaws and an actively exploited Outlook zero-day. The updates tackle serious remote code execution, privilege escalation, and information disclosure vulnerabilities across Windows, Exchange Server, SharePoint, Azure, and other Microsoft products. Explore the most critical flaws, affected products, and essential remediation steps to secure your systems.

Nov 11, 2026

Open Beyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response
vulnerability researchBeyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response

CVE Research

Beyond GitLab's Critical RCE: What CVE-2026-97229 Reveals About Exploitation, Patch Gaps, and Security Response

Nov 6, 2026