]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2020-25722 s4/dsdb/samldb: check sAMAccountName for illegal characters
authorDouglas Bagnall <douglas.bagnall@catalyst.net.nz>
Fri, 22 Oct 2021 02:27:25 +0000 (15:27 +1300)
committerJule Anger <janger@samba.org>
Mon, 8 Nov 2021 09:52:11 +0000 (10:52 +0100)
commit9be11622765c060971c4fcc2fba981f760f897d8
tree62b528ad1b33739cb8291c89199cc770cdbafd10
parent4439ac7bb6e8fcb1610fa94923c3daaed3e4c958
CVE-2020-25722 s4/dsdb/samldb: check sAMAccountName for illegal characters

This only for the real account name, not the account name implicit in
a UPN. It doesn't matter if a UPN implies an illegal sAMAccountName,
since that is not going to conflict with a real one.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14564

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
selftest/knownfail.d/ldap_upn_sam_account [deleted file]
source4/dsdb/samdb/ldb_modules/samldb.c