Article View: comp.security.unix
Article #4Re: Security hole with WU-FTPD
From: Matthew Kirkwood
Date: Wed, 20 Jan 1999 00:00
Date: Wed, 20 Jan 1999 00:00
16 lines
1517 bytes
1517 bytes
On 20 Jan 1999, Villy Kruse wrote: > >I have seen this happen before. In my case the hacker first broke into an NT > >machine (has microsoft ever made a product that was secure? ;-) ) then used > >SAMBA to access the server. I have disable this product and my hacker > >problems disappeared. > > Is samba able to access any directory other than those you specifically > specify as shares in the smb.conf? Sort of. Last time I looked it would happily follow symlinks outside the share's 'root' directory. A symlink to / allows access to the whole lot.. Matthew.
Technical Details
Message-ID:
<Pine.GSO.3.96.990120111923.4073B-100000@handbag.tecc.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<369FBEFB.EB1531B6@gds.ca> <%3No2.325$oD6.26447@burlma1-snr1.gtei.net> <distler-1801991517200001@192.168.0.2> <78290m$30j$1@nnrp1.dejanews.com> <784aub$k4i$1@pharmnl.ohout.pharmapartners.nl>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10952f,e0782a6bf0e6f7aa X-Google-Attributes: gid10952f,public X-Google-Thread: 102983,e0782a6bf0e6f7aa X-Google-Attributes: gid102983,public X-Google-Thread: 10669a,e0782a6bf0e6f7aa X-Google-Attributes: gid10669a,public X-Google-Thread: fa777,e0782a6bf0e6f7aa X-Google-Attributes: gidfa777,public From: Matthew Kirkwood <jock@tecc.co.uk> Subject: Re: Security hole with WU-FTPD Date: 1999/01/20 Message-ID: <Pine.GSO.3.96.990120111923.4073B-100000@handbag.tecc.co.uk> X-Deja-AN: 434771002 References: <369FBEFB.EB1531B6@gds.ca> <%3No2.325$oD6.26447@burlma1-snr1.gtei.net> <distler-1801991517200001@192.168.0.2> <78290m$30j$1@nnrp1.dejanews.com> <784aub$k4i$1@pharmnl.ohout.pharmapartners.nl> Content-Type: TEXT/PLAIN; charset=US-ASCII Mime-Version: 1.0 Newsgroups: comp.security.unix,redhat.networking.general,aus.computers.linux,comp.os.linux.networking