full-disclosure - Re: Samba Remote Zero-Day Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 7 Feb 2010 07:59:48 +1100
From: paul.szabo@...ney.edu.au
To: full-disclosure@...ts.grok.org.uk, marxclou@...hmail.com
Subject: Re: Samba Remote Zero-Day Exploit

Dear Marx,

> This is an interesting point of view.

I had replied to you personally only, you should not have posted my
reply to any mailing lists. But since you posted... yes my views are
interesting, should be studied and followed, for enlightenment :-)

> However u haven't answered my question. Is there an option to enable
> a traversal or lets say chdir to a path outside of the configured
> enviroment which is disabled by default?

No I do not think there is an option to allow chdir to outside.
(Please scritunize docs and sources, I may have missed something.)

Cheers, Paul

Paul Szabo   psz@...hs.usyd.edu.au   http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics   University of Sydney    Australia

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/