The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
History
                    No history.
Information
                Published : 2016-04-25 00:59
Updated : 2016-12-31 02:59
NVD link : CVE-2016-2112
Mitre link : CVE-2016-2112
CVE.ORG link : CVE-2016-2112
JSON object : View
Products Affected
                samba
- samba
canonical
- ubuntu_linux
CWE
                
                    
                        
                        CWE-254
                        
            7PK - Security Features
