Claimed Zero Day exploit in Samba.

Jeremy Allison jra at
Fri Feb 5 14:55:36 MST 2010

On Fri, Feb 05, 2010 at 10:52:01PM +0100, Thomas Bork wrote:
> Jeremy Allison wrote:
>> The problem occurs as Samba allows clients using the UNIX
>> extensions (which are also turned on by default) to create
>> symlinks on remotely mounted shares on which they have write
>> access that point to any path on the file system.
> But this is not possible, if 'unix extensions = no' is set on the server  
> side, isn't it?


> I think it is a nice feature to symlink to areas outside a share,  
> because I don't have to double the data.
> If
> 'wide links = yes'
> and
> 'unix extensions = no'
> is set on the server side, this cannot be exploited, correct?


I'm making a code change that will disallow "wide links = yes"
to be set on a share is "unix extensions = yes". That should
address any root cause.


More information about the samba-technical mailing list