Re: Samba Remote Zero-Day Exploit

[marxclou () hushmail com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> The default setting is "writeable = no". If you change that, then
> you are responsible for reading the docs and setting secure
> options.

This is an interesting point of view. However u haven't answered my
question. Is there an option to enable a traversal or lets say
chdir to a path outside of the configured enviroment which is
disabled by default?

Regards,
 marx

On Sat, 06 Feb 2010 21:29:14 +0100 paul.szabo () sydney edu au wrote:
> Dear Marx,
>
> > seems like u get personal pissed ...
>
> No I do not take it personally.
>
> > ... how it is possible per "default" ...
>
> The default setting is "writeable = no". If you change that, then
> you are responsible for reading the docs and setting secure
> options.
>
> Cheers, Paul
>
> Paul Szabo   psz () maths usyd edu au
> http://www.maths.usyd.edu.au/u/psz/
> School of Mathematics and Statistics   University of Sydney
> Australia
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQMCAAYFAktt1HgACgkQ3FclBRq92Bd4bgQAgLruU2uXcdEYvskonAm9mxpQVgiD
CNTiyEwNAyBI8FU0cPaPPNQK01EI5g8K067dgh02dO+9Tz7bRapOXkjq3MRqIgOqdrk7
ylD0j7WJFHEOhYXiPBFE1Lr5lUqL1FCTETt0VyJnQ3XTIx2x5oZ/Wx6a6GSkhUtfn5f2
oPlFMBw=
=sDvn
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/