[Pkg-samba-maint] Bug#864291: samba: CVE-2017-9461: infinite loop on bad-symlink resolution
Hugo Lefeuvre
hle at debian.org
Wed Jun 28 14:28:20 UTC 2017
Hi,
I couldn't reproduce this bug in the wheezy version and I think it
isn't affected.
I get the following error message:
$ smbclient //server/share -c "posix; symlink nothing broken"
(...)
$ smbclient //localhost/shareddir -c "put /etc/issue broken"
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.6]
NT_STATUS_OBJECT_NAME_NOT_FOUND opening remote file \broken
In the wheezy version, the fd_open_atomic function doesn't exist and
the existing fd_open function doesn't use loops.
Regards,
Hugo
--
Hugo Lefeuvre (hle) | www.owl.eu.com
4096/ ACB7 B67F 197F 9B32 1533 431C AC90 AC3E C524 065E
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20170628/08e5245b/attachment.sig>
More information about the Pkg-samba-maint
mailing list