Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
Re: Sharp Zaurus SL-5500 upgrade ROM v3.1 - serious Samba issue
Date: Tue Jun 24 2003 - 12:24:13 CDT
This is true for my 5600 as well, but oddly enough it doesn't appear when
hooked into my Linux partition - only when using the Zaurus Manager with
Windows. That could be some idiosyncracy with my setup, however.
Also listening to all interfaces on the 5600 is qpe...not sure if that has
been audited recently.
Hack Like You're In the Movies: http://www.immunitysec.com/CANVAS/
> The Sharp Zaurus is a linux-based PDA running Embedix. In the May
> version of the Sharp Zaurus newsletter, version 3.1 of the flash
> ROM was announced with various new versions of software and added
> OS functionality. The linux kernel went from 2.4.6 to 2.4.18.
> The Zaurus docking station comes with a USB connection, perceived
> as a network interface both by the Zaurus and the connected PC.
> An added feature with the new ROM version is that as you plug the
> Zaurus into the docking station a Samba server is automatically
> started. This by default gives read/write access to all documents
> stored on the device without authentication. I have not found this
> feature documented anywhere.
> This Samba server unfortunately listens on ALL active network
> interfaces with no restrictions that I have been able to determine
> on who gets to connect. I have successfully mounted both over
> 802.11b and regular LAN.
> The version 3.1 ROM is supposedly an adaptation of the ROM for
> the newer Sharp Zaurus SL-5600. Since I don't have an SL-5600
> available I can't verify whether the same problem exists there.
> An email to the Zaurus developers on zaurussupportsharpsec.com,
> sent June 3 2003, has not seen a response.
> The workaround, unless you're comfortable with configuring (or
> disabling) Samba servers under linux, is to make sure you never
> have an active external network interface while the Zaurus is
> sitting in its docking station.
> Bjørn Tore Sund Phone: (+47) 555-84894 Stupidity is like a
> System administrator Fax: (+47) 555-89672 fractal; universal
> Math. Department Mobile: (+47) 918 68075 infinitely
> University of Bergen VIP: 81724
> tekniskmi.uib.no Email: bjorntsmi.uib.no http://www.mi.uib.no/