-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
____/ Lusotec on Tuesday 08 Sep 2009 11:44 : \____
> Roy Schestowitz wrote:
>> Windows Vista/7 : SMB2.0 NEGOTIATE PROTOCOL REQUEST Remote B.S.O.D.
>>
>> ,----[ Quote ]
>> | V. BUSINESS IMPACT
>> |
>> | An attacker can remotly crash without no user interaction, any
>> | Vista/Windows 7 machine with SMB enable. Windows Xp, 2k, are NOT
>> | affected as they dont have this driver.
>> |
>> | VI. SYSTEMS AFFECTED
>> |
>> | Windows Vista/7 All (64b/32b|SP1/SP2 fully updated) and possibly Win
>> | Server 2008 as it use the same SMB2.0 driver (not tested).
>> `----
>>
>> http://seclists.org/fulldisclosure/2009/Sep/0039.html
>>
>> I'm sure Vista 8 will solve everything! Just bear with Microsoft... some
>> day it will all be wonderful. They promise.
>
> Microsoft should remove the network file systems, SMB in particular, from
> the kernel to user space. With some care the performance drop is very
> small. Also security is increased by having it in user space, preferably
> running from an unprivileged account.
>
> GNU/Linux has NFS support both in the kernel and in user space and the
> performance difference is not worth having it in the kernel, even if the
> kernel NFS is very stable and safe.
Microsoft won't do NFS. See the latest ECIS complaint against Microsoft. Gates
admitted that they just try to screw Oracle and Sun.
- --
~~ Best of wishes
Commercial televsion is like deliberately sticking hat pins through your
frontal lobes most of the time. -- Rebecca Ore
http://Schestowitz.com | GNU/Linux | PGP-Key: 0x74572E8E
Mem: 2075800k total, 1660792k used, 415008k free, 12460k buffers
http://iuron.com - next generation of search paradigms
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkqmzFEACgkQU4xAY3RXLo5EKACdE3KrdA0nhJTKxjaHZ4I27pJL
ZwwAn1vTccB/4tVz4lMKTSb/jl/0Ax7Y
=WkK0
-----END PGP SIGNATURE-----
|
|
