]> git.ipfire.org Git - thirdparty/samba.git/commit
projects / thirdparty / samba.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: db01cab) | patch
CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"
authorStefan Metzmacher <metze@samba.org>
Thu, 10 Mar 2016 01:46:59 +0000 (02:46 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:08:51 +0000 (04:08 +0200)
commit29ab0d99dd14007176f0b1d86f39c660ae33731a
treed9b370b99bf86331a1f86dc2e8372b731f85df99tree
parentdb01cab7e6bc93cc100829203a0636967eaae392commit | diff
CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"

With this option turned off we only allow DCERPC_AUTH_LEVEL_{NONE,INTEGRITY,PRIVACY},
this means the reject any request with AUTH_LEVEL_CONNECT with ACCESS_DENIED.

We sadly need to keep this enabled by default for now.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source4/rpc_server/dcerpc_server.c diff | blob | blame | history
source4/rpc_server/dcerpc_server.h diff | blob | blame | history
Mirror of https://github.com/samba-team/samba.git