search for: shaharir

Hi, Just want to ask about the status of this:- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0002 >From list archives I gather the fix is still under refinement (but committed (and removed?) in HEAD and RELENG_5_2). One paranoid little shop is running a public web server on RELENG_4_9, and contemplating this patch:-

Hi, Summary: Access swat (http://host:901), click on "Password", and swat shows the contents of /etc/passwd!! Setup:- Samba 2.0.4 on Solaris 2.6 unix password sync = ON cron job updates smbpasswd to add new accounts in /etc/passwd. Dual identity (One for new users, one for "registered" users) Background:- The thing worked fine until /etc/passwd got corrupt one day,