Stefan Metzmacher 8512eed8e2 CVE-2016-2126: auth/kerberos: only allow known checksum types in check_pac_checksum() ...

aes based checksums can only be checked with the
corresponding aes based keytype.

Otherwise we may trigger an undefined code path
deep in the kerberos libraries, which can leed to
segmentation faults.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12446

Signed-off-by: Stefan Metzmacher <metze@samba.org>

2016-12-09 12:05:00 +01:00

..

credentials

CVE-2016-2110: libcli/auth: pass server_timestamp to SMBNTLMv2encrypt_hash()

2016-03-29 16:25:40 +02:00

gensec

gensec/spnego: work around missing server mechListMIC in SMB servers

2016-09-16 12:05:33 +02:00

kerberos

CVE-2016-2126: auth/kerberos: only allow known checksum types in check_pac_checksum()

2016-12-09 12:05:00 +01:00

ntlmssp

auth/ntlmssp: add ntlmssp_{client,server}:force_old_spnego option for testing

2016-04-29 09:34:30 +02:00

auth_sam_reply.c

Remove a number of NT_STATUS_HAVE_NO_MEMORY_AND_FREE macros from the codebase.

2014-03-05 16:33:21 +01:00

auth_sam_reply.h

auth: avoid overwriting the auth_sam_reply.h header all the time.

2014-05-12 17:49:46 +02:00

common_auth.h

s4-auth: Do not override the NT_STATUS_NOT_IMPLEMENTED error for winbindd

2014-07-04 02:52:35 +02:00

wbc_auth_util.c

auth: add missing includes to auth/wbc_auth_util.c

2014-11-14 23:27:05 +01:00

wscript_build

auth: avoid overwriting the auth_sam_reply.h header all the time.

2014-05-12 17:49:46 +02:00