That was a good guess of mine eh! :-)
Think it's a "feature" of CIFS and/or NetBIOS, which you can't turn
off. No doubt it's documented on the Samba site, and it makes it even more
important to disallow access to the NetBIOS ports.
--
Regards,
Juha
PGP fingerprint:
B7E1 CC52 5FCA 9756 B502 10C8 4CD8 B066 12F3 9544
On Fri, 18 Aug 2000 [EMAIL PROTECTED] wrote:
> It appears that the usernames were somehow extracted by Retina Scan from
> the Samaba service. This is based on the user names being exclusively
> and completely the ones in /etc/smbpasswd. I'd still like to know how,
> but it is mildly comforting to know that it's "only" a samba thing.
> Interesting exploit tho.
>
> Vik :v)
>
_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list
