Okay then ... big question.

How do I ensure my shares are not publicly writable?

This probably should be in the newbie list :)


Regards,
Brett


----- Original Message -----
From: "Tom Badran" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 20, 2001 12:57 PM
Subject: Re: [expert] Nimda


> On Thursday 20 September 2001 3:27 am, you wrote:
> > One post said that Samba (emulating windows file sharing) is vulnerable.
>
> This is not true. Only publicly writeable samba shares are vunerable, and
> only the data stored within the share is (and is vunerable without the
worm
> anway). So as the worm adds no more vunerablilties, basically unless you
> share your system files as publically writeable (and therefore should be
> beaten to death with a wet fish) you are perfectly safe. There has only
ever
> been one case of a unix worm propigating, and if i remember correctly, you
> had to have a very specific set up for it to work (i.e very outdated). All
> these worms/viruses/trojans etc. only affect people with either IIS
servers
> (microsoft web servers) and outlook (express) email clients. This new one
is
> particulaly bad as it spreads through multiple methods, not just one as
most
> do. Personally, anyone one who seriously considers using a microsoft
server
> is a <<insert profanity here>> idiot, and shouldnt be in charge of a
server.
>
> Frankly, it proves yet again that microsoft is bottom of the pile for
> software products (some may disagree). Bottom line, use linux, be happy,
no
> fear from hackers, unless you do something wrong yourself.
>
> We are using some of the most cutting edge software in the world, and no
one
> can take that away from us.
>
> --
> Tom "Tomahawk" Badran
> Department of Computing, Imperial College
>
>
>


----------------------------------------------------------------------------
----


> Want to buy your Pack or Services from MandrakeSoft?
> Go to http://www.mandrakestore.com
>


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to