Claimed Zero Day exploit in Samba.
jra at samba.org
Fri Feb 5 14:55:36 MST 2010
On Fri, Feb 05, 2010 at 10:52:01PM +0100, Thomas Bork wrote:
> Jeremy Allison wrote:
>> The problem occurs as Samba allows clients using the UNIX
>> extensions (which are also turned on by default) to create
>> symlinks on remotely mounted shares on which they have write
>> access that point to any path on the file system.
> But this is not possible, if 'unix extensions = no' is set on the server
> side, isn't it?
> I think it is a nice feature to symlink to areas outside a share,
> because I don't have to double the data.
> 'wide links = yes'
> 'unix extensions = no'
> is set on the server side, this cannot be exploited, correct?
I'm making a code change that will disallow "wide links = yes"
to be set on a share is "unix extensions = yes". That should
address any root cause.
More information about the samba-technical