Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Samba Remote Zero-Day Exploit
From: marxclou () hushmail com
Date: Sat, 06 Feb 2010 21:43:36 +0100

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The default setting is "writeable = no". If you change that, then
you are responsible for reading the docs and setting secure
options.

This is an interesting point of view. However u haven't answered my
question. Is there an option to enable a traversal or lets say
chdir to a path outside of the configured enviroment which is
disabled by default?

Regards,
 marx

On Sat, 06 Feb 2010 21:29:14 +0100 paul.szabo () sydney edu au wrote:
Dear Marx,

seems like u get personal pissed ...

No I do not take it personally.

... how it is possible per "default" ...

The default setting is "writeable = no". If you change that, then
you are responsible for reading the docs and setting secure
options.

Cheers, Paul

Paul Szabo   psz () maths usyd edu au
http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney
Australia
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQMCAAYFAktt1HgACgkQ3FclBRq92Bd4bgQAgLruU2uXcdEYvskonAm9mxpQVgiD
CNTiyEwNAyBI8FU0cPaPPNQK01EI5g8K067dgh02dO+9Tz7bRapOXkjq3MRqIgOqdrk7
ylD0j7WJFHEOhYXiPBFE1Lr5lUqL1FCTETt0VyJnQ3XTIx2x5oZ/Wx6a6GSkhUtfn5f2
oPlFMBw=
=sDvn
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault