oss-security - Re: Samba symlink 0day flaw

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4B6D7292.2070304@debian.org>
Date: Sat, 06 Feb 2010 14:45:54 +0100
From: Yves-Alexis Perez <corsac@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: Samba symlink 0day flaw

On 06/02/2010 14:31, Nico Golde wrote:
> The wide_links variable, at least not in my copy.
> 

       wide links (S)

           This parameter controls whether or not links in the UNIX file
           system may be followed by the server. Links that point to areas
           within the directory tree exported by the server are always
           allowed; this parameter controls access only to areas that are
           outside the directory tree being exported.

           Note that setting this parameter can have a negative effect
on your
           server performance due to the extra system calls that Samba
has to
           do in order to perform the link checks.

           Default: wide links = yes


This is samba 2:3.4.5~dfsg-1. Note the name is wide links, not wide_links.

Cheers,
-- 
Yves-Alexis


Download attachment "signature.asc" of type "application/pgp-signature" (901 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.