PT-2016-3333 · Samba+5 · Samba+5
Stefan Metzmacher
·
Published
2015-04-01
·
Updated
2024-06-15
·
CVE-2016-2110
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Samba versions 3.x through 4.1.x
Samba versions 4.2.0 through 4.2.10
Samba versions 4.3.0 through 4.3.7
Samba versions 4.4.0 through 4.4.1
Description
The issue is related to the NTLMSSP authentication implementation, allowing man-in-the-middle attackers to perform protocol-downgrade attacks. This can be achieved by modifying the client-server data stream to remove application-layer flags or encryption settings, such as clearing the
NTLMSSP NEGOTIATE SEAL or NTLMSSP NEGOTIATE SIGN option, which can disrupt LDAP security. The vulnerability is associated with security weaknesses in the Samba package, potentially allowing a remote attacker to impact data integrity.Recommendations
For Samba versions 3.x, update to version 4.2.11 or later.
For Samba versions 4.2.x, update to version 4.2.11 or later.
For Samba versions 4.3.x, update to version 4.3.8 or later.
For Samba versions 4.4.x, update to version 4.4.2 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Samba
Suse
Ubuntu