BugTraq
Re: Samba Remote Zero-Day Exploit Feb 06 2010 01:21PM
Stefan Kanthak (stefan kanthak nexgo de) (2 replies)
Dan Kaminsky wrote:

[...]

> (On a side note, you're not going to see this sort of symlink stuff on
> Windows,

What exactly do you mean?
Traversing symlinks on the server/share, or creation of "wide" symlinks
by the client on the server/share?

Since Windows 2000 NTFS supports "junctions", which pretty much resemble
Unix symlinks, but only for directories.
See <http://support.microsoft.com/kb/205524/en-us>

On the server, create a junction in your share and let it point to an
arbitrary local directory outside the share, and clients connected to
that share can enter the junction and access the "linked" directory.

If you have write access to the share from the client you can create
a "wide" junction there too, just as the OP showed with smbclient/samba.

> and Samba is supposed to match Windows semantics in general.

Except a mapping of directory symlinks to junctions for example.-(

Stefan

[ reply ]
RE: Samba Remote Zero-Day Exploit Feb 08 2010 08:38PM
Michael Wojcik (Michael Wojcik microfocus com) (1 replies)
Re: Samba Remote Zero-Day Exploit Feb 08 2010 09:33PM
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)
RE: Samba Remote Zero-Day Exploit Feb 09 2010 02:20PM
Michael Wojcik (Michael Wojcik microfocus com)
Re: Samba Remote Zero-Day Exploit Feb 06 2010 05:43PM
Dan Kaminsky (dan doxpara com) (1 replies)
Re: Samba Remote Zero-Day Exploit Feb 06 2010 10:26PM
Stefan Kanthak (stefan kanthak nexgo de)


 

Privacy Statement
Copyright 2010, SecurityFocus