OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: NFS exporting

Re: NFS exporting

Steve Simmons (scslokkur.dexter.mi.us)
Thu, 14 Apr 1994 16:10:54 -0400 (EDT) 

Steve Bellovin writes:

>fsirand doesn't give you cryptographyically-strong random numbers;
>however, an outsider isn't ``supposed'' to have even one sample from
>which to work.  (If the outsider is eavesdropping, he or she can pick
>up the root file handle directly, so it doesn't matter much.)

Hmmm...if I understand the attack correctly, all one need do is ask
for random inode numbers until a directory entry is found.  From there,
once recursively extracts `..' until the top is found, and then you 
have the whole tree with names in short order.