Security fix, new loglines

Andrew Tridgell
Tue, 30 Sep 1997 07:00:57 -0000

> I've installed the new version, and tried to use the exploit to get
root
> access on our Linux-machine. As expected this didn't work. BUT I
didn't
> get the message in my logfiles. I've even tried with debug level 10
with
> no success.

There are several possible reasons for this.

The most likely is that you are not using the exploit code
correctly. The instructions given in the exploit that was posted are
not complete and are partly inaccurate. This is probably a good thing.

The new log message will only appear if the intruder gets the attack
right. The offets don't have to be right, but the rest of the attack
does need to be.

If you stuff up the exploit then you will just get a failed login in
your Samba log files.

Andrew