Stefan Metzmacher 45a9ca1ada CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY... ...

This requires transport encryption.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-03-30 04:18:53 +02:00

..

backupkey

CVE-2016-2118: s4:rpc_server/backupkey: require DCERPC_AUTH_LEVEL_PRIVACY

2016-03-30 04:18:31 +02:00

browser

s4:rpc_server/browser.c - remove unused code

2010-06-29 22:32:05 +02:00

common

s4:rpc_server: dcesrv_generic_session_key should only work on local transports

2016-03-29 16:24:44 +02:00

dnsserver

CVE-2016-2118: s4:rpc_server/dnsserver: require at least DCERPC_AUTH_LEVEL_INTEGRITY

2016-03-30 04:18:31 +02:00

drsuapi

CVE-2016-2118: s4:rpc_server/drsuapi: require DCERPC_AUTH_LEVEL_PRIVACY

2016-03-30 04:18:31 +02:00

echo

CVE-2016-2118: s4:rpc_server/rpcecho: allow DCERPC_AUTH_LEVEL_CONNECT by default

2016-03-30 04:18:52 +02:00

epmapper

CVE-2016-2118: s4:rpc_server/epmapper: allow DCERPC_AUTH_LEVEL_CONNECT by default

2016-03-30 04:18:52 +02:00

eventlog

s4-eventlog: fixed dcerpc handle return

2010-11-16 07:16:04 +00:00

lsa

CVE-2016-2118: s4:rpc_server/lsa: reject DCERPC_AUTH_LEVEL_CONNECT by default

2016-03-30 04:18:51 +02:00

netlogon

CVE-2016-2118: s4:rpc_server/netlogon: reject DCERPC_AUTH_LEVEL_CONNECT by default

2016-03-30 04:18:51 +02:00

remote

s4:rpc_server/remote: use dcerpc_binding_set_*() in remote_op_bind()

2014-02-13 11:54:17 +01:00

samr

CVE-2016-2118: s4:rpc_server/samr: allow _samr_ValidatePassword only with PRIVACY...

2016-03-30 04:18:53 +02:00

spoolss

s4:rpc_server/spoolss: use dcerpc_parse_binding() to create the notify binding

2014-02-13 11:54:14 +01:00

srvsvc

lib/param: handle non-constant strings properly by passing in a memory context

2014-02-20 10:11:06 +13:00

unixinfo

dcesrv_unixinfo: No wbc_context required

2014-03-05 16:33:21 +01:00

winreg

s4-rpc: improved error mapping for several RPC server calls

2011-04-04 10:30:30 +10:00

wkssvc

s4:wkssvc RPC server - better solution for srvsvc* enum's in server_info.c

2010-11-27 21:50:41 +01:00

dcerpc_server.c

CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"

2016-03-30 04:18:51 +02:00

dcerpc_server.h

CVE-2016-2118: s4:rpc_server: make use of "allow dcerpc auth level connect"

2016-03-30 04:18:51 +02:00

dcerpc_server.pc.in

dcerpc_server: Add 'modulesdir' variable to pkg-config file.

2012-02-23 16:26:25 +01:00

dcesrv_auth.c

s4:rpc_server: require access to the machine account credentials

2016-03-29 16:24:47 +02:00

dcesrv_mgmt.c

CVE-2016-2118: s4:rpc_server/mgmt: allow DCERPC_AUTH_LEVEL_CONNECT by default

2016-03-30 04:18:52 +02:00

handles.c

libndr: Rename policy_handle_empty to ndr_policy_handle_empty.

2012-03-20 13:54:07 +01:00

service_rpc.c

s4:rpc_server: ignore ncacn_http endpoints for now

2014-09-22 23:09:08 +02:00

wscript_build

s4-rpc_server: only build backup_key rpc service when Heimdal is available.

2015-03-20 23:25:52 +01:00