[dundee] EeePC Exploit

[Lee Hughes]

Yeah, for some reason they ship a very old version smbd... 

I think you need to concentrate in the 'dross' in Xandros.

Apparently Xandros 'has more windows features than any other linux'

That obvisouly includes windows '(in)security' features  too ;-)


probably worth doing 

apt-get update

apt-get upgrade


and see if you get a later version of smbd

it does seem very very old...

I'm dismayed that eee come rootable out the box, Xandros really is
windows mentality out of the box...

Linux is a way thinking, where Windows is a way of 'not thinking'


azmodie <azmodie at gmail.com> wrote: http://www.risesecurity.org/blog/entry/6/

Turns out the modified version of Xandros shipped with the EeePC is vulnerable to a smbd exploit

Interesting to see the Metasploit being used in this example.
 
azmodie
-- 
Umbrella Corporation :-
"They are the fear within all of that there is a company. The Corporation controlling everything that is Umbrella.
A combination of Microsoft and the US Military. At some level there is a board of directors who meet once a
 month and decide all of our fates."
-- Jeremy Bolt - Producer - Resident Evil : Apocalypse _______________________________________________
dundee GNU/Linux Users Group mailing list
dundee at lists.lug.org.uk  http://dundee.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/dundee
Chat on IRC, #tlug on dundee.lug.org.uk

       
---------------------------------
 Sent from Yahoo! &#45; a smarter inbox.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.lug.org.uk/pipermail/dundee/attachments/20080211/7d425127/attachment.html