search for: nullsession

Hi All, Probably simple question: I want to make a share for sharing an lmhosts file which gets included by the clients. This share has to be very public and accept nullsessions (whatever that me be (no username and password?)). I want this because I need to generate aliases on the fly for for our fileserver for some clients (terminalservers specifically). So I thought that having an server side maintained lmhosts file that is included by the terminalserver clients w...

Hello, I'm using samba 3.0.24-6etch9 on a Debian stable system. I've received a vulnerability report from our CERT stating, among others: Vulnerability: anonymous nullsession exploitable, can list open shares, can read registry ToDo: Allow only authenticated users access to shared components (remove 'everyone') Tool Reference: ISS 170 So I've tried nessus on that, it reported the same. After some digging, I was able to list users and shares using the follow...