UNSOLVED

marco72

updated

16 years ago

M

marco72

10 Posts

0

812

August 9th, 2010 06:00

CIFS Shares

Hello,

i have a celerra (DART=5.6.47-11) with 2 virtual datamover defined.

I created CIFS share using the '$' symbol at the and of each share's names for hiding them (e.g.: marco$).

Security ran a scan with Nessus end figured out that it's possible to enumerate the CIFS share's names

Synopsis:
It is possible to enumerate remote network shares.

Description:
By connecting to the remote host, Nessus was able to enumerate the network share names.

Here are the SMB shares available on the remote host when logged as a NULL session:

share1$

share2$

.

.

.

share9$

There some parameters that i can set for eliminate this issue?

Thank you in advance

  • ral67_xyz

    147 Posts

    248

    0

    Posted August 9th, 2010 07:00

    you can try setting cifs.nullsession to 0

    are you sure a Windows server doesnt behave the same way ?

  • ral67_xyz

    147 Posts

    248

    0

    Posted August 9th, 2010 08:00

    or try setting a share ACL and turning on ABE