CVE-2016-2118: s3:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...
commit6602e7e2af0ae743f49a746663adf122d4af34ff
authorStefan Metzmacher <metze@samba.org>
Sun, 28 Feb 2016 21:48:11 +0000 (28 22:48 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 30 Mar 2016 02:18:53 +0000 (30 04:18 +0200)
tree908417d5e0df7cce5c4918a1857a5e08884eb945
parent45a9ca1ada8892ddc76a2f554c97d605431ff5f7
CVE-2016-2118: s3:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...

This requires transport encryption.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
source3/rpc_server/samr/srv_samr_nt.c