Re: [Full-disclosure] Samba Remote Zero-Day Exploit

[Dan Kaminsky]

On Feb 6, 2010, at 5:26 PM, "Stefan Kanthak" <stefan.kant...@nexgo.de>  
wrote:

> Dan Kaminsky wrote on February 06, 2010 6:43 PM:
>
>> You need admin rights to create junctions.
>
> OUCH!
> No, creating junctions (as well as the Vista introduced symlinks)
> DOESN'T need admin rights!
>
> [snip]
>

Really?  Try. Especially remotely over SMB w/o remote interactive.


> Stefan
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/