full-disclosure - question regarding CAN-2004-0930

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <0203A1F683E317458D5F226DAA57133308035E@ptle2m04.up.corp.upc>
From: ACastigliola at unumprovident.com (Castigliola, Angelo)
Subject: question regarding CAN-2004-0930

The reason is that when you run the "dir" command Samba does the
processing and chokes. When you try the latter command "ls" Linux\Unix
processes the command and has no problems.

Angelo Castigliola III
Enterprise Security Architecture
UnumProvident
Telephone: 207-575-3820

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of evilninja
Sent: Tuesday, November 16, 2004 9:17 AM
To: full-disclosure@...ts.netsys.com
Cc: security@...ba.org
Subject: [Full-Disclosure] question regarding CAN-2004-0930

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

hi,

don't know if this is the right place to ask, but here it goes:

i was notified by one of my users (!) about the recent samba
vulnerability (CAN-2004-0930 [1]) that this is indeed easily
"exploitable" by just issuing commands with long wildcard-patterns in
the filename part, just as:

<smb-share>:\> dir ******.exe

ok, my smbd went crazy and the "dir" command was waiting for the result.
but: when i mounted the smb-share under linux (mount -t smbfs ....) and
issuing

$ ls /mnt/smb-share/*******.exe

"ls" returned *instantly* with "No such file or directory" and smbd did
not go crazy. now i ask myself: how comes?

thank you for comments,
Christian.

[1] http://samba.iasi.roedu.net/samba/security/CAN-2004-0930.html
- --
BOFH excuse #120:

we just switched to FDDI.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBmgveC/PVm5+NVoYRAkOFAJ9SdPk1yskCAwAId+wOfCY3n4rR0ACfVB3K
mObYXTZxboxpcLnV4vaov9Q=
=J3hN
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html