]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2016-2118: s4:rpc_server/drsuapi: require DCERPC_AUTH_LEVEL_PRIVACY
authorStefan Metzmacher <metze@samba.org>
Tue, 14 Jul 2015 07:13:00 +0000 (09:13 +0200)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:08:19 +0000 (04:08 +0200)
commit1f3708a515d7856a27bb550c7a3b2a50ddd1a43e
tree96838f4764c85e76b62b11a68db29b9db8706504
parent1c06e9265e30a38087e6d9b4dcf51dc920933c27
CVE-2016-2118: s4:rpc_server/drsuapi: require DCERPC_AUTH_LEVEL_PRIVACY

This matches windows and prevents man in the middle downgrade attacks.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
selftest/knownfail
source4/rpc_server/drsuapi/dcesrv_drsuapi.c
source4/selftest/tests.py