]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2020-1472(ZeroLogon): libcli/auth: add netlogon_creds_is_random_challenge() to...
authorStefan Metzmacher <metze@samba.org>
Wed, 16 Sep 2020 14:15:26 +0000 (16:15 +0200)
committerKarolin Seeger <kseeger@samba.org>
Fri, 18 Sep 2020 10:45:37 +0000 (12:45 +0200)
commit13185dd83563cc7927a511f5d2a4a56cc2186743
treee8ebff0b194bd3e9c240acaa7fd5b1bdc029b566
parent35277995d3977c37509ef072e6b5cc785ceb7ee2
CVE-2020-1472(ZeroLogon): libcli/auth: add netlogon_creds_is_random_challenge() to avoid weak values

This is the check Windows is using, so we won't generate challenges,
which are rejected by Windows DCs (and future Samba DCs).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher <metze@samba.org>
libcli/auth/credentials.c
libcli/auth/proto.h