The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://badlock.org/Â - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html - | |
References | () http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0611.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0612.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0613.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0614.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0618.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0619.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0620.html - | |
References | () http://rhn.redhat.com/errata/RHSA-2016-0624.html - | |
References | () http://www.debian.org/security/2016/dsa-3548Â - | |
References | () http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html - | |
References | () http://www.securitytracker.com/id/1035533Â - | |
References | () http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012Â - | |
References | () http://www.ubuntu.com/usn/USN-2950-1Â - | |
References | () http://www.ubuntu.com/usn/USN-2950-2Â - | |
References | () http://www.ubuntu.com/usn/USN-2950-3Â - | |
References | () http://www.ubuntu.com/usn/USN-2950-4Â - | |
References | () http://www.ubuntu.com/usn/USN-2950-5Â - | |
References | () https://bto.bluecoat.com/security-advisory/sa122Â - | |
References | () https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821Â - | |
References | () https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964Â - | |
References | () https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399Â - | |
References | () https://security.gentoo.org/glsa/201612-47Â - | |
References | () https://www.samba.org/samba/history/samba-4.2.10.html - | |
References | () https://www.samba.org/samba/latest_news.html#4.4.2Â - | |
References | () https://www.samba.org/samba/security/CVE-2016-2112.html - Patch, Vendor Advisory |
Information
Published : 2016-04-25 00:59
Updated : 2024-11-21 02:47
NVD link : CVE-2016-2112
Mitre link : CVE-2016-2112
CVE.ORG link : CVE-2016-2112
JSON object : View
Products Affected
canonical
- ubuntu_linux
samba
- samba
CWE
CWE-254
7PK - Security Features