PT-2016-3333 · Samba+5 · Samba+5
Stefan Metzmacher
·
Publicado
2015-04-01
·
Atualizado
2024-06-15
·
CVE-2016-2110
CVSS v3.1
5.9
Média
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Samba versions 3.x through 4.1.x
Samba versions 4.2.0 through 4.2.10
Samba versions 4.3.0 through 4.3.7
Samba versions 4.4.0 through 4.4.1
Description
The issue is related to the NTLMSSP authentication implementation, allowing man-in-the-middle attackers to perform protocol-downgrade attacks. This can be achieved by modifying the client-server data stream to remove application-layer flags or encryption settings, such as clearing the
NTLMSSP NEGOTIATE SEAL or NTLMSSP NEGOTIATE SIGN option, which can disrupt LDAP security. The vulnerability is associated with security weaknesses in the Samba package, potentially allowing a remote attacker to impact data integrity.Recommendations
For Samba versions 3.x, update to version 4.2.11 or later.
For Samba versions 4.2.x, update to version 4.2.11 or later.
For Samba versions 4.3.x, update to version 4.3.8 or later.
For Samba versions 4.4.x, update to version 4.4.2 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Red Hat
Samba
Suse
Ubuntu