Lucene search
F5F5:K79401162HistoryMay 10, 2016 - 12:00 a.m.
K79401162 : Samba vulnerabilities CVE-2016-2111, CVE-2016-2113, and CVE-2016-2114
2016-05-1000:00:00
my.f5.com
39
Security Advisory Description
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel’s endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the “server signing = mandatory” setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
f5
f5
samba
samba
NETLOGON Spoofing Vulnerability.
2016-04-12 00:00:00
"server signing = mandatory" not enforced
2016-04-12 00:00:00
Missing TLS certificate validation allows man in the middle attacks
2016-04-12 00:00:00
prion
prion
Design/Logic Flaw
2016-04-25 00:59:00
Design/Logic Flaw
2016-04-25 00:59:00
Information disclosure
2016-04-25 00:59:00
cvelist
cvelist
debiancve
debiancve
cve
cve
nvd
nvd
ubuntucve
ubuntucve
osv
osv
samba - regression update
2016-04-13 00:00:00
samba - regression update
2016-04-13 00:00:00
samba - security update
2016-04-13 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3548-1)
2016-04-12 00:00:00
Debian Security Advisory DSA 3548-1 (samba - security update)
2016-04-13 00:00:00
CentOS Update for ipa-admintools CESA-2016:0612 centos6
2016-04-14 00:00:00
debian
debian
[SECURITY] [DSA 3548-1] samba security update
2016-04-13 20:42:03
[SECURITY] [DSA 3548-1] samba security update
2016-04-13 20:42:03
nessus
nessus
Debian DSA-3548-1 : samba - security update (Badlock)
2016-04-14 00:00:00
Samba < 4.4.2, 4.3.8, 4.2.11, 3.6.26 Multiple Vulnerabilities
2016-09-08 00:00:00
Samba 4.2.x < 4.2.11 / 4.3.x < 4.3.8 / 4.4.x < 4.4.2 Multiple MitM
2016-12-09 00:00:00
ubuntu
ubuntu
Samba regression
2016-05-25 00:00:00
Samba regressions
2016-05-18 00:00:00
Samba regressions
2016-05-04 00:00:00
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 8 package samba-DC version 4.4.2-alt1
2016-04-12 00:00:00
Security fix for the ALT Linux 7 package samba-DC version 4.4.2-alt1
2016-04-12 00:00:00
Security fix for the ALT Linux 7 package samba version 4.4.2-alt1
2016-04-12 00:00:00
redhat
redhat
(RHSA-2016:0620) Critical: samba4 security, bug fix, and enhancement update
2016-04-12 00:00:00
(RHSA-2016:0614) Critical: samba security, bug fix, and enhancement update
2016-04-12 21:09:54
(RHSA-2016:0618) Critical: samba security, bug fix, and enhancement update
2016-04-12 19:07:21
archlinux
archlinux
samba: multiple issues
2016-04-23 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: samba-4.3.8-0.fc23
2016-04-13 20:24:23
[SECURITY] Fedora 24 Update: samba-4.4.2-1.fc24
2016-04-15 03:20:46
[SECURITY] Fedora 22 Update: samba-4.2.11-0.fc22
2016-04-14 04:23:49
freebsd
freebsd
samba -- multiple vulnerabilities
2016-04-12 00:00:00
centos
centos
ctdb, ipa, ldb, libldb, libsmbclient, libtalloc, libtdb, libtevent, libwbclient, openchange, pyldb, pytalloc, python, samba, samba4, tdb security update
2016-04-13 00:13:42
libsmbclient, samba security update
2016-04-13 00:30:21
libsmbclient, samba security update
2016-04-13 00:14:40
amazon
amazon
Critical: samba
2016-04-13 11:45:00
slackware
slackware
[slackware-security] samba
2016-04-15 20:48:27
oraclelinux
oraclelinux
samba and samba4 security, bug fix, and enhancement update
2016-04-12 00:00:00
samba security update
2016-04-12 00:00:00
samba security update
2016-04-12 00:00:00
cloudfoundry
cloudfoundry
Samba and Windows Vulnerabilities | Cloud Foundry
2016-04-14 00:00:00
veracode
veracode
Man-In-The-Middle (MitM)
2019-05-02 05:28:43
Man-In-The-Middle (MitM)
2019-05-02 05:28:43
Sensitive Information Disclosure
2019-05-02 05:28:41
packetstorm
packetstorm
Windows Pass-Through Authentication Methods Improper Validation
2015-03-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Netlogon Spoofing (MS15-027; CVE-2015-0005)
2015-03-10 00:00:00
symantec
symantec
Microsoft Windows 'Netlogon' RPC CVE-2015-0005 Spoofing Vulnerability
2015-03-10 00:00:00
SA122 : SMB Vulnerabilities in Windows and Samba (Badlock)
2016-04-15 08:00:00
suse
suse
Security update for samba (important)
2016-04-13 00:08:02
Security update for samba (important)
2016-04-13 00:13:24
Security update for samba (important)
2016-04-13 00:11:56
kitploit
kitploit
Impacket - Collection Of Python Classes For Working With Network Protocols
2018-06-19 13:30:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2016-12-24 00:00:00
mageia
mageia
Updated samba packages fix security vulnerabilities
2016-04-26 21:02:43