What's new

security issue w/ AiCloud (?)

donbowman

Occasional Visitor
if i open a browser to https://<myip>/<smbhost> if immediately sees the files there on 'smbhost', w/o logging in if I have the Cloud Disk feature enabled. (smbhost is the netbt name of an internal samba server).

I see
"JerryLin: namequery.c-->name_resolve_bcast: Attempting broadcast lookup for name <smbhost><0x1d> num_interfaces=[4]" come out the lighttpd when run it interactively for this case, 'smbhost'. Does this seem right? i was very surprised. The https://<myip>/ works ok, asks for a password and all. but just guessing the smbhost name bypasses.

I don't think i've mucked up something on the device (although i guess its possible).

I'm running 3.0.0.4.372.30_2.

Anyone else see this, or is it just me? I guess this is https://github.com/RMerl/asuswrt-merlin/issues/364 issue, but i thought it only allowed accessing local files on the USB of the router, not all files on the LAN.
 
Last edited:

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top