full-disclosure - Re: Samba Remote Zero-Day Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20100206204336.578C011803D@smtp.hushmail.com>
Date: Sat, 06 Feb 2010 21:43:36 +0100
From: marxclou@...hmail.com
To: paul.szabo@...ney.edu.au, full-disclosure@...ts.grok.org.uk
Subject: Re: Samba Remote Zero-Day Exploit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>The default setting is "writeable = no". If you change that, then
>you are responsible for reading the docs and setting secure
>options.

This is an interesting point of view. However u haven't answered my
question. Is there an option to enable a traversal or lets say
chdir to a path outside of the configured enviroment which is
disabled by default?

Regards,
 marx

On Sat, 06 Feb 2010 21:29:14 +0100 paul.szabo@...ney.edu.au wrote:
>Dear Marx,
>
>> seems like u get personal pissed ...
>
>No I do not take it personally.
>
>> ... how it is possible per "default" ...
>
>The default setting is "writeable = no". If you change that, then
>you are responsible for reading the docs and setting secure
>options.
>
>Cheers, Paul
>
>Paul Szabo   psz@...hs.usyd.edu.au
>http://www.maths.usyd.edu.au/u/psz/
>School of Mathematics and Statistics   University of Sydney
>Australia
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQMCAAYFAktt1HgACgkQ3FclBRq92Bd4bgQAgLruU2uXcdEYvskonAm9mxpQVgiD
CNTiyEwNAyBI8FU0cPaPPNQK01EI5g8K067dgh02dO+9Tz7bRapOXkjq3MRqIgOqdrk7
ylD0j7WJFHEOhYXiPBFE1Lr5lUqL1FCTETt0VyJnQ3XTIx2x5oZ/Wx6a6GSkhUtfn5f2
oPlFMBw=
=sDvn
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/