1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
samba-mirror/source4/dsdb/samdb
Joseph Sutton 1cfaa078ff CVE-2023-0614 s4-dsdb: Treat confidential attributes as unindexed
In the unlikely case that someone adds a confidential indexed attribute
to the schema, LDAP search expressions on that attribute could disclose
information via timing differences. Let's not use the index for searches
on confidential attributes.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15270

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2023-03-20 10:03:38 +01:00
..
ldb_modules CVE-2023-0614 s4-dsdb: Treat confidential attributes as unindexed 2023-03-20 10:03:38 +01:00
cracknames.c CVE-2020-25722 s4/cracknames: add comment pointing to samldb spn handling 2021-11-09 19:45:33 +00:00
samdb_privilege.c
samdb.c Do not create an empty DB when accessing a sam.ldb 2020-11-26 06:52:41 +00:00
samdb.h CVE-2023-0614 ldb: Prevent disclosure of confidential attributes 2023-03-20 10:03:38 +01:00