CVE-2016-2118: librpc: change the default auth level from DCERPC_AUTH_LEVEL_CONNECT...

ncacn_ip_tcp:server should get the same protection as ncacn_np:server
if authentication and smb signing is used.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/librpc/rpc/binding.c b/librpc/rpc/binding.c
index 37e0c4f54f6722abc5cd661d9ec6fbcedc027238..6407a8d4ee16709548c314c71d9ee865bf1aed33 100644 (file)
--- a/librpc/rpc/binding.c
+++ b/librpc/rpc/binding.c
@@ -591,7 +591,7 @@ _PUBLIC_ void dcerpc_binding_get_auth_info(const struct dcerpc_binding *b,
        } else if (b->flags & DCERPC_CONNECT) {
                auth_level = DCERPC_AUTH_LEVEL_CONNECT;
        } else if (auth_type != DCERPC_AUTH_TYPE_NONE) {
-               auth_level = DCERPC_AUTH_LEVEL_CONNECT;
+               auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
        } else {
                auth_level = DCERPC_AUTH_LEVEL_NONE;
        }