The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
No history.
Information
Published : 2016-04-25 00:59
Updated : 2016-12-31 02:59
NVD link : CVE-2016-2112
Mitre link : CVE-2016-2112
CVE.ORG link : CVE-2016-2112
JSON object : View
Products Affected
samba
- samba
canonical
- ubuntu_linux
CWE
CWE-254
7PK - Security Features