Non notée
CVE-2016-2124 A flaw was found in the way samba implemented SMB1 authentication
Description
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| samba | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.samba.org www.samba.org
- [debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update lists.debian.org
- GLSA-202309-06 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de samba
Les 40 CVE de samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
Élevée
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Moyenne
CVE-2023-0225
A flaw was found in Samba
4.3
Moyenne
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
Élevée