Samba Security Announcement -- Potential Arbitrary File Access

[JG]

On Thu, 30 Sep 2004 05:18:30 -0500
"Gerald (Jerry) Carter" <jerry at samba.org> wrote:

>  The patch for Samba 3.0.5 and earlier releases
>  (samba-3.0.5-reduce_name.patch) can be downloaded
>  from http://download.samba.org/samba/ftp/patches/security/

hm, is the 3.0.5 patch supposed to apply to v3.0.5, or is it just me? i
downloaded a clean 3.0.5 source and i can't find where the patch should
apply in vfs.c. 
a "grep leading source/smbd/*" also doesn't show up the comment that is
in the patch and should be in the source.

JG
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20041001/7a3bd50a/attachment.bin