Re: Looking for SAMBA and SMB Vulnerabilities

From: Pedro Ortale Neto (ortaleat_private)
Date: Fri Apr 13 2001 - 21:51:19 PDT

  • Next message: Marc Maiffret: "Re: Hack / take down new Windows XP beta serverhttp://www.testwindowsxp.com/"

    Hello Dylan,
    
    Try this link:
    
    http://search.securityfocus.com/vdbsearch.html?query=samba
    
    rgds,
    
    Pedro Ortale
    
    
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    Pedro Ortale Neto                 Network Security Consultant / Admin.
    E-Mail: ortaleat_private    Barretos, SP, Brazil +55-17-9708-8776
    Web :                             http://www.unsecurity.com.br/pedro/
    Icq :                             30931542
    PGP/MIME spoken here              B614 70A5 7D73 ED31 7980  3E40 0FD1
                                      A5BD 0A8A F275
    =======================================================================
    Staff Officer, IWP Investigations International Web Police, Badge 01714
    
    On Fri, 13 Apr 2001, Dylan Wall wrote:
    
    > Hello,
    >
    > Looking for SAMBA and SMB vulnerabilities.
    >
    > Summary:
    > I 'm setting up a lab and security test plan for an architecture which supports
    > both SAMBA (BSD 2.8) and SMB (Windows NT 4.0, SP5) for file sharing.   Only
    > the required ports ( in this case SMTP and Netbios for SMB) will be open.
    > I've done some reading on SAMBA and SMB vulnerabilities where the primary
    > threat is password cracking using SMB Packet Capture for instance.  However,
    >   I imagine that there are a number of other exploits a malicious user could
    > use.    Please advise.
    >
    > Thanks,
    > Dylan
    > Free, encrypted, secure Web-based email at www.hushmail.com
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 23:27:17 PDT