Re: Security hole with WU-FTPD

Article View: comp.security.unix

Article #5

Back to comp.security.unix Previous Next

From: Thomas Stieler
Date: Wed, 20 Jan 1999 00:00

38 lines
2483 bytes

In comp.os.linux.networking Matthew Kirkwood <jock@tecc.co.uk> wrote:
> On 20 Jan 1999, Villy Kruse wrote:

>> >I have seen this happen before.  In my case the hacker first broke into an NT
>> >machine (has microsoft ever made a product that was secure? ;-) ) then used
>> >SAMBA to access the server.  I have disable this product and my hacker
>> >problems disappeared.
>> 
>> Is samba able to access any directory other than those you specifically 
>> specify as shares in the smb.conf?

> Sort of.  Last time I looked it would happily follow symlinks outside the
> share's 'root' directory.

> A symlink to / allows access to the whole lot..

> Matthew.

I think, you can disable this with option wide links.
Set "wide links = no" and this solves your problem!

Also look for "root directory" option!!

Regards,

Thomas

-- 
----------------------------------------------------------------------------
     Dipl. phys. Thomas Stieler      stieler@nO.spAM.physik3.gwdg.de

     Drittes Physikalisches  Institut
     B�rgerstr. 42-44  ---  37073 G�ttingen
     Tel.:(0551)397742 ---  Fax:(0551)397720

     Privat: 
     Kurze Str.15/12  ---  37073 G�ttingen  ---  Tel.:(0551)485603 
----------------------------------------------------------------------------

Technical Details

Message-ID: <7852ab$ngo$2@gwdu19.gwdg.de>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References:

<369FBEFB.EB1531B6@gds.ca> <%3No2.325$oD6.26447@burlma1-snr1.gtei.net> <distler-1801991517200001@192.168.0.2> <78290m$30j$1@nnrp1.dejanews.com> <784aub$k4i$1@pharmnl.ohout.pharmapartners.nl> <Pine.GSO.3.96.990120111923.4073B-100000@handbag.tecc.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 10952f,e0782a6bf0e6f7aa
X-Google-Attributes: gid10952f,public
X-Google-Thread: 102983,e0782a6bf0e6f7aa
X-Google-Attributes: gid102983,public
X-Google-Thread: fa777,e0782a6bf0e6f7aa
X-Google-Attributes: gidfa777,public
X-Google-Thread: 10669a,e0782a6bf0e6f7aa
X-Google-Attributes: gid10669a,public
From: Thomas Stieler <stieler@You_knOw_bout_spam.physik3.gwdg.de>
Subject: Re: Security hole with WU-FTPD
Date: 1999/01/20
Message-ID: <7852ab$ngo$2@gwdu19.gwdg.de>
X-Deja-AN: 434895750
Content-Transfer-Encoding: 8bit
Sender: Thomas Stieler <stieler@hobbes.physik3.gwdg.de>
References: <369FBEFB.EB1531B6@gds.ca> <%3No2.325$oD6.26447@burlma1-snr1.gtei.net> <distler-1801991517200001@192.168.0.2> <78290m$30j$1@nnrp1.dejanews.com> <784aub$k4i$1@pharmnl.ohout.pharmapartners.nl> <Pine.GSO.3.96.990120111923.4073B-100000@handbag.tecc.co.uk>
Content-Type: text/plain; charset=iso-8859-1
Organization: III. physikalisches Institut
Mime-Version: 1.0
User-Agent: tin/pre-1.4-980618 (UNIX) (Linux/2.0.35 (i586))
Newsgroups: comp.security.unix,redhat.networking.general,aus.computers.linux,comp.os.linux.networking

Reply to Parent Message