The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2016-04-24 17:59
Updated : 2016-12-30 18:59
NVD link : CVE-2016-2112
Mitre link : CVE-2016-2112
JSON object : View
CWE
CWE-254
7PK - Security Features
Products Affected
canonical
- ubuntu_linux
samba
- samba