Re: Windows NT 4.0, 95, 98 (?) networked PRN flaw

From: Aleph One (aleph1at_private)
Date: Thu Jun 10 1999 - 12:11:19 PDT

  • Next message: Dr. Mudge: "Solaris 2.5 /bin/su [was: vulnerability in su/PAM in redhat]"

    This is a bug in the NFS server implementation. The NFS protocol
    does not limit the character set that can be used in filenames, but
    the NFS server MAY restrict it based on the native filesystem it
    uses to store the files.
    
    >From RFC 1813:
    
    4.6 File name component handling
    
       Server implementations of NFS version 3 protocol will
       frequently impose restrictions on the names which can be
       created. Many servers will also forbid the use of names that
       contain certain characters, such as the path component
       separator used by the server operating system. For example,
       the UFS file system will reject a name which contains "/",
       while "." and ".." are distinguished in UFS, and may not be
       specified as the name when creating a file system object.
       The exact error status values return for these errors is
       specified in the description of each procedure argument. The
       values (which conform to NFS version 2 protocol server
       practice) are not necessarily obvious, nor are they
       consistent from one procedure to the next.
    
    --
    Aleph One / aleph1at_private
    http://underground.org/
    KeyID 1024/948FD6B5
    Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:48:58 PDT